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PUZZLING PLETHORA OF 
PROFFERED PROTOCOLS 

Array of vendor-driven Web services 
specs are anything but standard 




BY YVONNE L. LEE 

Two more specifica 
tions for dealin 
with Web services 
are advancing onto 
the scene, leaving 
developers buried 
under an avalanche 
of competing speci- 
fications and uncer- 
tain as to which the 
industry ultimately Ovum's Rotibi 
will rally around. 

The Organization for the 
Advancement of Structured 
Information Standards (OASIS) 
consortium in late April finalized 
its WS- Security specification, 



BEA might be crying wolf 
on specifications, says 



while the World 
Wide Web Consor- 
tium (W3C) fol- 
lowed on its heels 
with its announce- 
ment of a working 
draft for the Web 
Services Choreog- 
raphy Description 
language. 

"A lot of [devel- 
opers] want a cohe- 
sive vision," said 
Ron Schmelzer, senior analyst 
with ZapThink LLC. "They 
want to know that the specs that 
are coming out are going to be 
► continued on page 18 



Eclipse Names 
Oracle Exec 
As Its Director 



BY JENNIFER DEJONG 

The Eclipse board of directors 
was expected this week to name 
Oracle Corp. vice president 
Michael Milinkovich as execu- 
tive director of the Eclipse 
Foundation. 

The appointment, which is 
set to become effective June 8, 
would deliver on an earlier 
promise that the not-for-profit 
corporation, established in Feb- 
ruary, would not be run by an 
employee of IBM Corp. nor any 
other member of the Eclipse 
Foundation. 

"I am excited to have this 
incredible opportunity," said 
Milinkovich. As vice president of 
technical services for Oracles 
application server group, he fol- 
lowed Eclipse developments, 
but he was not directly involved 
in the open-source consortium. 

Milinkovich said he sees his 
role as both administrative and 
visionary. "There is a need for 
both," he said. The vision for 
Eclipse — to be the leading soft- 
ware development environment 
across platforms and lan- 



guages — is already firmly estab- 
lished, he noted, adding that he 
does not expect to get involved 
on the coding level. 

Milinkovich said his first pri- 
ority is to staff the organization. 
He has not yet determined how 
many employees he will hire or 
what percentage of the founda- 
tion s budget — between US$1.2 
million and $1.5 million derived 
from membership dues — will 
be allocated to salaries. 

Based in Ottawa, Milin- 
kovich said he does not expect 
his staff to join him there. "The 
goal is not to have a single site 
with a large group of people," 
he said. "Eclipse will be a dis- 
tributed organization." 

Asked whether IBM, which 
contributes more developers to 
Eclipse than any other member, 
will have more influence than 
others on how the open-source 
consortium emerges, Milinko- 
vich said it will not. "IBM has 
shown a lot of leadership in let- 
ting Eclipse go and starting its 
existence as an independent 
foundation," he said. I 



Red Hat Desktop Linux: No Native .NET 

Rival Novell reaches milestones with Mono, Evolution 




Red Hat Desktop is a secure 
alternative to Windows, says Ferris. 



BY EDWARD J. CORREIA 

In the bout between heavy- 
weight Linux distributors over 
corporate desktop Linux, the 
tale of the tape is sure to 
include how each supports non- 
Linux applications. 

Red Hat Inc. in May revealed 
Red Hat Desktop, an edition of 
its enterprise Linux positioned as 
a secure and manageable alter- 
native to Windows, armed for 
Windows migration with a Citrix 
remote execution client and 
compatibility with VMware. 

Meanwhile, Novell Inc. in 
May released the first beta of 
Mono, its open-source imple- 
mentation of Microsoft's .NET 
development framework, claim- 
ing its runtime now supports 
ADO.NET and ASP.NET apps 
natively, with general availability 
still on track for June 30. The 
company also released to open- 
source its Connector for Ex- 
change, and announced plans to 



incorporate the technology for 
linking Linux desktops to Ex- 
change servers into the next ver- 
sion of its Evolution open- 
source groupware, due this fall. 
"We're providing an open 
choice for a desktop and alter- 
native to the dominant platform 
today," said Mike Ferris, prod- 
uct marketing manager for Red 
Hat's enterprise and desktop 
Linux. Ferris said the compa- 
ny's security strategy involves 
extending so-called security 
enhanced (SE) features of its 
enterprise Linux into desktop 
► continued on page 17 



EASIER USE 
IS THE GOAL 
OF J2EE 1.5 

BY YVONNE L. LEE 

Ease of development will be 
the hallmark of J2EE 1.5, 
which Sun Microsystems Inc. 
will introduce at the JavaOne 
conference later this month, say 
members of the expert group 
that is helping to build it. 

The first stage of work on 

JSR 244, or J2EE 1.5, began on 

May 10, with the executive 

committee for J2SE and J2EE 

► continued on page 23 



SPECIAL REPORT 

Enterprise Databases: 

Mission-Critical 

Commodities 

When selecting a database, developers 
often choose price over performance . 
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Jacada Hopes to Remove Confusion From Multiple Apps 

Fusion draws from mainframe, Windows server and Web to create composite 



BY DAVID RUBINSTEIN 

Isn't it annoying when you try to 
book a rental car, and the agent 
asks you for your name, address 
and credit-card number, and 
five minutes later asks for exact- 
ly the same information? When 
you ask why, the agent often 
responds, "The computer didn't 
take it the first time." 

What's really happening, of 
course, is that you've reached 
someone who is juggling a num- 
ber of different applications to 
complete the transaction, and he 
has to input the same informa- 
tion for each of the apps. 

To help businesses speed up 
their transaction process by 
bringing multiple applications 
into a single, simplified inter- 
face, Jacada Ltd. on May 18 
launched Fusion, which enables 
developers to create a com- 
posite application from apps sit- 
ting on mainframes, Windows 
servers or the Web, according to 
David Holmes, Jacada's execu- 
tive vice president. 

Fusion consists of Jacada's 
extant Integrator tool for access- 
ing mainframe or AS/400 envi- 
ronments, its renamed Web- 
Fuse Web integration product 



1=3 







Jacada aims to simplify tasks that require multiple applications by providing a single interface. 



and new WinFuse tool for 
exposing Windows applications 
as Web services. "Fusion is for 
building composite applications 
in a [service-oriented architec- 
ture]," Holmes said. 

WinFuse gives users the 
ability to fire up a PowerBuilder 
or Visual Basic application and 
navigate through it, while the 
tool provides an understanding 



of how the application is built 
and associates objects with 
screens. It gathers the informa- 
tion at the message layer, 
Holmes added, noting that it's 
not a pixel-based tool but actu- 
ally "gets below the glass." Win- 
Fuse creates a repository of the 
application screens that users 
can build these composite appli- 
cations from. 



"Skeptics say you can just 
rewrite the app, or that there 
have to be APIs" to access them 
programmatically, Holmes said. 
"But the inventory of Windows 
client/server applications must 
support portal initiatives, or 
composite application devel- 
opment or self-service applica- 
tions," which they do not do 
now, he added. "This is more 



agile than hard-coding APIs." 

Holmes said Dynamic Mar- 
kets Ltd. did a study this year 
that indicates 66 percent of 
call-center agents use three or 
more applications at the same 
time to complete a task, while 
27 percent use five or more. 
"The problem is huge," he said. 

Users can either designate 
one of the existing applications 
as the "driving" app and con- 
nect the others to it with 
Fusion, or if none of the appli- 
cations supports the business 
process, a new composite 
application with a new inter- 
face can be created, Holmes 
said. 

The Fusion product still is 
evolving; Holmes said the com- 
pany has yet to decide "how 
much of the stack we want to 
own," referring to rules engines, 
transformation logic and GUI 
generators. 

Holmes said analysts are call- 
ing Jacada's offering "agile 
CRM," but he said it doesn't feel 
comfortable for the company, 
which has been in middleware 
and tools. "We like to think of it," 
Holmes said, "as the perfect 
integration at the desktop." I 



There's No Taking License With Software 

Addition to Macrovision FLEXnet platform helps companies manage usage, costs 



BY DAVID RUBINSTEIN 

Macrovision Corp., which tradi- 
tionally seeks to help software 
vendors boost their revenue 
streams, is launching a new pro- 
duct to help software consumers 
manage their costs. FLEXnet 
Manager, announced on May 24, 
is an application designed to help 
software customers control their 
spending and maximize develop- 
er productivity. 

"Companies need to get 
smarter about how they're pur- 
chasing and using software," 
said Daniel Greenberg, Macro- 
vision's vice president of mar- 
keting, citing a 2001 study by 
research firm AMR that found 
that fewer than 50 percent of all 
licenses for CRM applications 
are even being used. "One of 
the challenges is to reduce the 
amount of shelfware," he said. 
"You can't do that without really 
understanding what licenses 
you have and how they are 
being used." 



One side of the 
problem is the over- 
licensing of software. 
Greenberg gave the 
example of a company 
that buys six software 
licenses for a group 
of six workers, and 
then acquires six more 
licenses for a second 
group of six workers 
after the first group is 
done, and repeats that a 
third time. Suddenly, 
the company has 18 
licenses for the same or Companies 
similar software when 
no more than six people were 
using it at any given time, result- 
ing in what Greenberg catego- 
rized as a 200 percent over- 
licensing of software. 

The flip side of the coin is the 
loss of productivity that occurs 
when project workers are idled 
because the licenses for a partic- 
ular product are being used by 
other workers. "We want to 







can use FLEXnet to track software use, 

remove barriers to access, to not 
have people waiting for software 
licenses to be freed," he said. 

Yet Greenberg said Macrovi- 
sion found that two-thirds of all 
enterprises don't even track soft- 
ware usage. The company's new 
offering gives enterprises visibili- 
ty into software usage patterns 
within the company, by user or 
product, or even down the fea- 



ture level within prod- 
ucts. Pricing is based 
on the number of 
users on the adminis- 
tration module and 
the number of ven- 
dors whose software is 
being monitored, but 
begins at around 
US$20,000, Green- 
berg said. 

FLEXnet Manag- 
er is a Web-based 
application that plugs 
into the FLEXnet 
licensing environment, 
with a user interface 
that is created from HTML. It 
allows users to look at all of a 
company's licenses, vendors and 
how the software is distributed, 
explained product manager Jim 
Griffin. A built-in reporting 
module analyzes usage. "From a 
single console, you can see the 
opportunities to share, and you 
can set it up to alert whoever is 
monitoring usage if licenses for a 



critical project are nearing a 
threshold," he said. 

Two keys to maximizing ROI 
on software are the pooling of 
licenses, and usage-based pur- 
chasing, said Griffin. Citing 
retailing, he said that when com- 
panies decentralized their ware- 
houses into more regional opera- 
tions, they found they needed to 
acquire even more inventory to 
ensure they had enough of each 
product to satisfy their cus- 
tomers. The results often were 
that each warehouse was over- 
stocked in certain products that 
sell better in other regions, and 
understocked in items that sold 
more in their region. 

By having development 
teams, for example, pool their 
licenses, companies can actually 
acquire fewer total licenses, yet 
have more of them available dur- 
ing critical periods of the devel- 
opment process when more 
workers are required to get the 
task done, Griffin said. I 
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NEW PRODUCTS, 



The Swiss company Dtrt AG has released a new toolbar component for 
.NET. The US$31.30 Drt.NavBar.Win control lets end users navigate 
around a data collection using developer-defined buttons . . . XAware 
Inc. has released a set of XML-based text integration hubs for several 
vertical markets, including EDI, health care, financial services and gov- 
ernment transactions. The XA-Xchange Hubs, 
which run on J2EE-based application servers, 
include a schema designer, a server, predefined Y Ah/w^nci 
format definitions and consulting services; the 
average deployment price is US$75,000 . . . Stellent Inc. has released 
Content Portlet Suite, a set of tools for building JSR 168-compliant 
content applications for any compatible portal server. The US$5,000- 
per-server Content Portlet Suite provides access to the company's 
Universal Content Management services, including check-in, workflow 
and search. JSR 168 defines a set of APIs for interoperability between 
portals and portlets . . . McObject LLC is in the final beta testing stage 
of ExtremeWS, an embedded HTTP server for network-attached 
devices. The server, which reguires less than 30KB of memory, is inte- 
grated with the company's ExtremeDB embedded database. The Web 
server works with compiled static HTML content that is turned into C 
source code and linked with the server itself . . . Style Report Ana- 
lytic Edition 6.0 is a new J2EE-based report generator from InetSoft 
r f Technology Corp. that extends the 
company's existing Style Report 
tion Enterprise Edition with OLAP func- 
tions and ad hoc reporting to the product's built-in data analysis fea- 
tures . . . MKS Inc. has made available the first beta of a 64-bit version 
of MKS Toolkit for Enterprise Developers, a set of Unix-style utilities 
for 64-bit Windows XP or Windows Server 2003. This version of MKS 
Toolkit is designed to run on the AMD Opteron processor. The beta can 
be downloaded now; general availability is scheduled within two weeks 
of the release of Microsoft's 64-bit operating systems . . . StarNet 
Communications Corp. has released what the company calls the first 
PC X server for 64-bit Windows running on the AMD Opteron proces- 
sor. X-Win64, which costs US$325 per seat, runs on 64-bit Windows 
XP and Windows Server 2003 . . . Microsoft Corp. has opened up the 
beta program for Live Communications Server 2005, an instant 
messaging server previously code-named Vienna. General availability 
is set for Q4 2004 . . . Blueberry Consul- 
tants Ltd.'s BB TestAssistant is a screen 
recording program for Windows, designed to capture end-user screen 
activity so that it can be reviewed by testers, the help desk or devel- 
opers. The application can capture keystrokes, mouse movements and 
Windows application errors, and costs US$149. 
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UPGRADES 



Telelogic AB has released version 7.1 of its Doors requirements man- 
agement tool, which now gives developers the ability to create links 
from requirements to tests, and to compare two requirements docu- 
ments using an automatic feature that puts a red line under the dif- 
ferences. New tables allow users to see multiple properties of each 
Sjji- i j-u-w/j-i requirement within a single table cell. The 
tool now also can run on Windows Server 
2003 and within Office 2003 . . . Version 7.0 of the Content Integra- 
tion Suite from Stellent Inc. allows developers to embed the content 
server into J2EE applications using the Java Connector Architecture 
and Java Message Service. The software costs US$30,000 per server 
. . . WRQ Inc. has updated its Reflection family of host access servers 
for Windows, Web sites and PC X-server environments. The updates 
include terminal emulation for VT500, Televideo 955 and VT-UTF8, 
SSL-based file transfers, secure communication with Kerberos using 
TCP, and support for TAPI 3.0. The new versions of Reflection also 
work with Tandem midrange servers . . . Version 5.0 of WebCharts3D, 
an interactive server-side graphing component for Java and Swing, 
now includes a chart designer with an integrated graphing server. In 
addition, it can generate XML DTDs and XSD schemas, and includes a 
schema for Swing programmers. It can also generate animated Flash 
images. The software, produced 



IBM Releases DB2 'Stinger' Beta 

Support for longer SQL statements, type 4 JDBC 
drivers, .NET and Eclipse among developer features 



BY JENNIFER DEJONG 

Promising the production ver- 
sion later this year, IBM Corp. 
last month made available the 
beta version of its DB2 Uni- 
versal Database, code-named 
Stinger, which will replace ver- 
sion 8.1. 

Many of its 200 new fea- 
tures aim to ease database 
administration and boost per- 
formance, but Stinger also 
offers productivity enhance- 
ments for developers, said 
IBM's director of strategy for 
DB2 information management 
software, Jeff Jones. 

Features of interest to 
developers include support for 
SQL statements as large as 
2MB and a type 4 JDBC driver, 
native support for SQL proce- 
dure language, increased flexi- 
bility in using call statements, 
and a new GUI that replaces 
the command line interface for 
altering tables at design time, 
he said. 

Developers don't code SQL 
statements that are 2 million 
characters long, but applica- 
tions such as SAP routinely 
generate them, said Jones. 
When developers bumped 
against the previous 64KB lim- 
it, they had to rewrite long SQL 
statements as a series of shorter 
ones. That task was not trivial, 
Jones noted. "You couldn't just 
truncate them." 

Also boosting developer pro- 
ductivity is the type 4 JDBC 
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Breaking long SQL statements 
into shorter ones wasn't trivial, 
says IBM's Jones. 

driver, which enables Java 
applications to access the data- 
base more easily. Because this 
version of the driver is pure 
Java, there is no need to boil it 
down to C code, said Jones. 
"You skip the compile step." 

In the same vein, previous 
versions of DB2 required 
developers to compile SQL 
procedure language to C. But 
Stinger provides native support 
for the SQL procedure lan- 
guage, eliminating the need to 
do that, said Jones. 

Stinger allows developers to 
embed call statements in places 
that previously couldn't be 
used. "For instance, you can 
issue a call statement from 
within a table function," said 



Jones. The ability to do that 
encourages code reuse. "If you 
have written it once, you can 
call it again," he said. 

Because Stinger includes a 
new GUI, developers can more 
easily rename columns at 
design time, said Jones. 

By representing the Earth as 
a globe instead of a flat map, a 
Stinger feature called Geodetic 
Extender lets developers build- 
ing geospatial applications do so 
more easily. 

IBM plans to release the new 
version of DB2 some time in the 
next three to six months, replac- 
ing the earlier version, delivered 
in November 2002. A spokesper- 
son said the company has not yet 
decided on a new version num- 
ber. The beta software is avail- 
able at www6.software.ibm.com 
/reg/dm/dm-adtpapp-i. 

In February, the company 
announced plug-ins that make 
DB2 available within the 
Eclipse framework. In Octo- 
ber 2003, IBM previewed 
Stinger's ability to integrate 
with the Microsoft .NET 
Framework and with IBM's 
Rational XDE Developer visu- 
al data modeler. 

Jones said the goal is not to 
move Microsoft programmers 
to IBM development environ- 
ments, but to get them to use 
DB2 with languages such as 
Visual Basic .NET and C#. 
"Developers are loyal to their 
platform." I 



Bridge.NET Spans Microsoft, Java 



BY JENNIFER DEJONG 

Adding a new entrant to the 
Java- to-. NET interoperability 
market, JBridge.NET recently 
announced a toolkit and run- 
time program. 

The product, called JB ridge 
.NET, joins .NET and Java run- 
time programs into a single 
runtime program capable of 
running both .NET and Java 
code, said Tim Altonji, chief 
marketing officer at the Hun- 
terdon, N.J., company. 

JBridge.NET works by ana- 
lyzing Java code and automati- 
cally generating equivalent 
code in .NET Although the 
newly created .NET code can 



make callbacks to Java, 
JBridge.NET cannot generate 
Java code from .NET Altonji 
said future versions are likely 
to do so. 

JBridge.NET differs from 
competitors' offerings, such as 
JNBridgePro, from JNBridge 
LLC, in Boulder, Colo.; and 
Ja.NET, from Intrinsyc Soft- 
ware International Inc., in Van- 
couver, British Columbia, in 
that it accesses programming 
objects in each runtime directly 
and does not provide the net- 
work technology necessary to 
connect the two applications. 
"It's a least common denomina- 
tor approach to integration," 



said Altonji. He said that 
because networking technolo- 
gies such as .NET Remoting 
and Java RMI are widely avail- 
able, the company saw no rea- 
son to include them. 

The program, which costs 
US$299 for five developers, is 
available at www.ejbridge.net. 

JBridge.NET can be used to 
build virtually any kind of inter- 
operability between .NET and 
Java, said Altonji. Common sce- 
narios include embedding a 
Java JFrame inside a .NET 
form, writing and running an 
EJB in .NET, and hosting .NET 
objects inside a J2EE applica- 
tion server. I 
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Executing on a Security Testing Plan 

AtStake offers analyzer that examines code in context to find potential vulnerabilities 



BY DAVID RUBINSTEIN 

Saying that security vulnerabili- 
ty testing is only as good as the 
expertise of the tester, security 
consulting firm AtStake Inc. 
introduced at Microsoft's Tech- 
Ed conference last month a sta- 
tic analysis tool that automates 
the examination of executables, 
dynamic link libraries and 
source code. 

"To evaluate whether or not 
there are vulnerabilities, you 
need to look at source code in 
the environment in which it was 
designed to run," said Mike Pit- 
tenger, general manager of 
products. 

Using the company's Smart- 
Risk Analyzer, a developer 
would input a debuggable exe- 
cutable file and the source code 
of the application into the tool, 
which automatically makes sure 
all calls can be dynamically 
linked, according to Chris 
Wysopal, AtStake's vice presi- 
dent of research and develop- 
ment. From there, he explained, 
the analyzer determines func- 



tion entry points and 
returns, and creates a 
model of the program. 

The analyzer does a 
security analysis on the 
model, scanning against a 
knowledge base of more 
than 400 potential vulner- 
abilities and ranking the 
results for developers 
based on severity. Finally, 
a detailed report is gener- 
ated, in which the specif- 
ic line of code where the 
vulnerability occurs is 
highlighted. "We try to 
get as much as we can 
from the static analysis, 
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Wysopal said. "Building AtStake's analyzer can find errors down to the line of code and rank their severity. 

richness into the model is 



as important as creating new 
[security] scans. We are looking 
for the triggers that can cause 
these problems." 

Pittenger called SmartRisk 
Analyzer a third-generation 
analysis tool. First, he said, was 
manual code review, which was 
slow, tedious and expensive. "It 
is as good as the attention span 



and the expertise of the review- 
er, and usually is done once, 
right before deployment," he 
said, calling the approach inef- 
fective. Then came dynamic 
analysis, which resulted in white- 
box or black-box testing but still 
relied on the tester's knowledge 
and understanding of the appli- 
cation and its environment. "The 



keyword search for function calls 
was a big improvement over text 
string searches, which returned 
so many false positives," Pit- 
tenger said. 

SmartRisk Analyzer does a 
complete discovery of data flow 
within an application and tests 
that against the knowledge 
base. "There are classes of vul- 



nerabilities we can scan for, 
such as SQL injection attacks, 
buffer overflows, poor crypto 
library usage and format string 
attacks," Wysopal explained. 
"We do complete analysis in all 
directions, and try to identify 
the triggers that can cause 
problems." The problem is 
magnified when developers use 
third-party DLLs, he said. 
"People are just gluing them 
together to create applications 
with no idea of the risk." 

SmartRisk Analyzer, which 
Wysopal said would cost an 
average work group around 
US$40,000, can emulate Win32, 
x86 and Solaris on SPARC envi- 
ronments, he said. The compa- 
ny is working on the ability to 
analyze Java and C# bytecode, 
he added. 

The company was founded 
at the end of 1999 as a security 
consulting firm, Pittenger said, 
and decided over the past sev- 
eral years to commercialize the 
tools. SmartRisk Analyzer is the 
first to come to market. I 
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Firstlogic's IQ8 Uses SOAP to Cleanse App Data 

Web services to act as universal bridge, making data from all applications consistent 



BY EDWARD J. CORREIA 

It surely must have been tempt- 
ing to slide SOAP into the name 
of a data cleansing tool that 
works through Web services. 



But data quality tools vendor 
Firstlogic Inc. resisted the urge 
in mid- May when it announced 
IQ8 Integration Studio, its 
next-generation data cleansing 



suite that it claims lets develop- 
ers create, deploy and manage 
rules that govern the cleanup 
and maintenance of consistent 
data across an enterprise. The 



tools are set for general release 
on June 30. 

According to Dave Dobson, 
Firstlogic's director of technolo- 
gy, the software parses free-form 
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data flowing as a SOAP payload 
and identifies addresses, names, 
account numbers and other 
fields that are susceptible to 
duplication or error and runs it 
through correction and stan- 
dardization algorithms. "We can 
also generate alternate versions 
of names and run them through 
matching rules and similarity 
algorithms," he said, adding that 
this helps in identifying dupli- 
cate database records. 

Vice president of develop- 
ment Joe Zurawski said that 
many prospects are skeptical 
about the need to cleanse their 
data, thinking that their data is 
already of the highest quality. 
"[But we] always find invalid, 
incomplete or null fields where 
you thought you had data. And 
typically, at least 30 percent of 
customer records are dupli- 
cates" or store the same person 
with different spellings, he said. 

"Data is fluid, and data 
snapshots degrade over time," 
asserted Chris Colbert, indus- 
try marketing director at First- 
logic. "People get married, 
customers move and change 
their addresses. Data quality is 
not a one-time thing; it's nev- 
er-ending." 

100 GRAND BARS ERRORS 

With a starting price of 
US$100,000, the software does 
far more than even a roomful of 
temps scanning piles of green- 
bar printouts, Colbert said. 
"People who take the manual 
approach miss a lot of the rela- 
tionships in their data; there's 
more than just the cleansing 
aspect. It's very difficult for a 
person to look at 20 million 
records and determine what's a 
match and not a match." 

IQ8 Integration Suite con- 
sists of four modules: a reposito- 
ry for storing configuration rules 
and metadata; the Data Quality 
Server, which processes batch 
projects and transactional data 
passed through SOAP; the Pro- 
ject Architect graphical environ- 
ment for creating dataflows and 
defining rules; and the IQ8 Web 
Service, the mechanism that 
enables communications to and 
from applications. 

Now in beta, IQ8 Integra- 
tion Suite, which requires a 
minimum of two processors, 
will be available for Web 
servers running on Linux, Unix 
and Windows servers. I 
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Infravio Unveils an Enterprise Web Services Registry 

The public UDDI registry has not lived up to its promise, says company 



BY JENNIFER DEJONG 

Claiming that UDDI has failed 
to do what it was written to do, 
Infravio Inc. in mid- May added 
a corporate Web services reg- 
istry, X-Registry, to its manage- 
ment suite. 

"UDDI is woefully lacking," 
said Infravio president and CEO 
Jeff Tonkel, referring to Univer- 
sal Description, Discovery and 
Integration, a public directory 
that allows developers to regis- 
ter the Web services they write 
so others can find them and 
reuse them. In the real world, 
companies demand more con- 
trol over their Web services for 
such things as usage and fees 
than UDDI provides, he said. 

X-Registry, the newest addi- 
tion to the Infravio Ensemble 
Web Services Management 
Suite, allows a company to cre- 
ate an enterprise directory of its 
Web services in order to pro- 
mote reuse. "Developers are 
creating hundreds of Web ser- 
vices," said Tonkel. But they 
have no useful way to discover 
them, he added. 

Although some developers 
list their Web services on 
UDDI, the public directory fails 
to provide pertinent information 
about each offering, Tonkel said. 
By contrast, X-Registry provides 
technical details about a Web 
service, such as sample source 
code for the client. 

In addition, it uses business 
terms to describe its offerings. 
For instance, an airline might 
name a Web service for buying 
a ticket. "Web services listed on 
UDDI typically have gobbledy- 
gook names," said Tonkel. 

More important, because X- 
Registry works with X-Broker, a 
companion component in the 
Ensemble Web Services Man- 
agement Suite, it gives compa- 
nies control over the security of 
its Web services. 

X-Broker acts as an interme- 
diary, authorizing the consum- 
ing application to use the Web 
service. It allows companies to 
implement quality-of-service 
agreements, where the provider 
specifies availability of the Web 
service and guarantees it will 
work properly. It also handles 
billing. For instance, a provider 
might charge a consumer 3 
cents each time the Web ser- 
vice is used. 

The ability to charge fees is 



critical to X-Registry users, 
who may choose to make their 
Web service directories avail- 
able to partners, noted Tonkel. 



"A business partner can come 
in, shop the registry, make a 
request to use a service, and 
wait for authorization from the 



provider," he said. 

Pricing for X-Registry starts 
at US$35,000 for five users. "It 
should be easy to find Web ser- 



vices and reuse them," said 
Tonkel. "Theoretically, that is 
part of the promise of Web 
standards." I 
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Sun to Showcase J2EE 1.5 at JavaOne 



BY YVONNE L. LEE 

Sun Microsystems Inc. will 
unveil details of J2EE 1.5 at the 
2004 JavaOne conference in 
San Francisco at the end of this 
month. 

J2EE 1.5 is the server ver- 
sion of Java, which is designed 
by Sun's Java Community 
Process. The new version, set 
for release in June 2005, will 
focus on ease of development 
by using features from the base 
Java, J2SE 1.5, which was 
released earlier this year. 

For the first time, this year's 
conference will be held concur- 
rently with Apple Computer 



Inc.'s Worldwide Developers 
Conference (WWDC). 

"This was a joint Apple-Sun 
decision. It was very purpose- 
ful," said Mike Bellissimo, 
senior director of Sun's soft- 
ware developer outreach. 

The JavaOne conference will 
take place June 28 through July 
1 in Moscone Center's North 
and South Halls, while the 
WWDC will run from June 28 
through July 2 in Moscone West. 

Attendees of either event 
will have the opportunity to 
attend sessions at both, Bellissi- 
mo said. Apple engineers will 
give presentations at JavaOne 



and Sun engineers will give 
presentations at the WWDC, 
he said. Pricing for the cross- 
attendance was still being set at 
press time, he added. 

However, Apple spokesman 
Stefan Offermann would nei- 
ther confirm nor deny details of 
the company's participation in 
JavaOne, or any relationship 
between the two events. 

This year's show, which will 
have the theme "Java Every- 
where in Action," will demon- 
strate applications on servers, 
desktops, handheld devices, 
set-top boxes and other plat- 
forms, Bellissimo said. 



"We're going to focus on one 
Java," said Bellissimo. He said 
that the company intends to 
emphasize that J2EE, J2SE and 
J2ME share a single platform 
despite being intended for 
servers, desktops and mobile 
devices, respectively. This mes- 
sage, he said, was intended to 
communicate to developers that 
Java presented a better con- 
sumer experience than Micro- 
soft's .NET He added that Sun 
was trying to get a Microsoft rep- 
resentative to expound on the 
companies' new relationship 
during a "fireside chat" at the 
conference. 



Tiger to Be Unleashed at Apple Event 



BY YVONNE L. LEE 

Apple Computer Inc. CEO 
Steve Jobs will let the compa- 
ny's latest cat out of the bag 
when he offers the details of 
Tiger — Mac OS X version 
10.4 — in his Worldwide Devel- 
opers Conference keynote June 
28 at San Francisco's Moscone 
Convention Center. 

Apple has for several years 



used the conference to unveil 
and expound on impending fea- 
tures of its cat-themed Unix- 
based operating system, and 
this year will be no different. 

Code names for versions 
10.0-10.3 of Mac OS X have 
been Cheetah, Puma, Jaguar 
and Panther, respectively. 

Ron Okomoto, vice presi- 
dent of Apple Worldwide 



Developer Relations, declined 
to discuss the specifics of Tiger, 
or even reveal its due date. 

Much of the conference is 
geared toward Linux and Java 
programmers who are develop- 
ing for the Mac but are new to 
the platform, Okomoto said. 
"Almost half the people who 
came to our conference last 
► continued on page 18 
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"We're going back to the 
future in that our platinum 
partners also will present dur- 
ing the sessions," Bellissimo 
said, acknowledging the com- 
plaints last year from third- 
party companies that JavaOne 
had become a platform for Sun 
and that other companies had 
no voice. 

The show is on pace to 
match its goal of 15,000 atten- 
dees, Bellissimo said. "Paid 
registration is way ahead of last 
year." 

In addition to the keynotes 
and conference sessions, Java- 
One will host four coding con- 
tests. "Our intent is to try to pro- 
vide a high level of interactivity 
with developers," Bellissimo 
explained. "They like to show off 
their stuff. It's really to make it a 
more fun learning event and less 
of a trade show" I 
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Strikelron's Hot for Web Services 

Creates hosted services geared toward business users 



BY YVONNE L. LEE 

Start-up Strikelron Inc., which 
released its first product, a Web 
services analyzer, last October, 
is working on a set of hosted 
services to help organizations 
find, understand and use Web 
services. 

The services will be known 
collectively as the Strikelron 
Web Services Business Net- 
work. The network is designed 
to be a single point of entry for 
finding, using and subscribing 
to privately owned and publicly 
available services. 

The goal, according to CEO 
Richard Holcomb, is to make 
services easier to understand 
and use not only for program- 
mers and IT staff but also for 
"the average Excel user." 

The Strikelron Web Ser- 
vices Business Network brings 
together search capabilities of a 
directory of Web services, by- 
subscription Web services, a 
knowledge base explaining the 
parameters and how to address 
the services as well as what to 



expect from the output, com- 
mercial services for managing 
subscription fees and tracking 
use, monitoring services and 
the company's Web Services 
Analyzer tool. 

Strikelron's services com- 
pete against those from Grand 
Central Networks Inc. but will 
focus more on "basic business 
functionality" rather than inte- 
gration services, Holcomb said. 
Such services would provide 
answers to questions that arise 
during regular business trans- 
actions, such as determining 
whether a telephone number 
may be called legally for tele- 
marketing purposes and how 
much tax it would cost to send a 
product to a location. 

Strikelron's services will 
include a directory for finding 
public services, but the direc- 
tory will not be based on Uni- 
versal Description, Discovery 
and Integration (UDDI), the 
OASIS specification for direc- 
tories of Web services. 

"UDDI hasn't worked very 
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Strikelron's Web Services Business Network acts as a single entry point to 
privately owned and publicly available Web services. 



well. People are trying to make it 
work, but it hasn't gotten them 
there," said Holcomb. 

In addition to providing a 
method for finding Web ser- 
vices, Strikelron offers ways to 
clarify how to use the services, 
giving designers what Holcomb 
referred to as a "knowledge 



base" that describes the function 
of services, as well as the input 
they require and the outputs 
they return. According to Hol- 
comb, directory providers can 
even include sample data to help 
users format their input data. 
Customers can look at a graphi- 
cal view of the data or can look 



directly at the XML, he said. 

In addition to the directory 
services, the Web Services Busi- 
ness Network will include paid 
and free subscription services to 
publicly available Web services, 
such as the U.S. government's 
"Do Not Call" registry. Sub- 
scribers would be able to look up 
phone numbers to see whether 
they are available for telemarket- 
ing. Holcomb claimed this is 
more efficient than receiving 
disc or paper updates from the 
government and having to 
design an application that would 
use that information. 

Each service will be priced 
individually, depending in part 
on the price the service's 
provider charges Strikelron, 
Holcomb said. 

Strikelron also will sell host- 
ed services for organizations to 
make their internal Web services 
easier to find and use. It could 
also function as a "trusted, reli- 
able" third party for businesses 
to find available Web services 
from other companies, he said. 

The services, in beta test at 
press time, are scheduled for 
general availability in June. 

"We are bringing up two to 
three new services a day," Hol- 
comb said. I 
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IBM zAAPs zSeries With Java 

Claims new execution environment will cut costs, draw developers to mainframe 



BY JENNIFER DEJONG 

IBM Corp. is betting that a new 
technology called zAAP will 
give Java developers a com- 



pelling reason to write applica- 
tions on the mainframe. 

Although the company has 
offered zSeries editions of its 



WebSphere product line since 
1998, a widespread perception 
that developing applications on 
big boxes is not cost-effective 



has kept most Java developers 
from using them, said Les 
Wyman, an IBM systems archi- 
tect for the zSeries. Many cus- 



really want 




n CMM and 
I processes 
scratch? 



Developing CMM° or CMM I* processes from scratch can be like opening a can 
of worms. You waste valuable time, money, and other resources trying to 
develop CMM* and CMMI* compliant processes and may never reach your 
goal of operating In compliance If you instal process-Max today, you can 
operate in compliance tomorrow With processMax, your software development 
organization immediately begins managing software development and 
maintenance projects In guaranteed compliance with the CMM and CMMI. 
processMax is the web-based project management system providing your 
managers and developers with step-by-step procedures, integrated document 
management, and automated workflow. processMax integrates process wfth 
day-to-day work, giving managers real-time, fact-based insight into project 
status, processMax is the proven solution - as verified by more than 40 
successful Inde 
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tomers ran back-end databases 
on the mainframe, but they 
chose to offload the develop- 
ment process to smaller, front- 
end boxes, he said. 

IBM claims that the zSeries 
Application Assist Processor, 
included in its eServer zSeries 
890 mainframe introduced in 
April, will change all that. 
Essentially a Java execution 
environment designed to work 
with the zSeries operating sys- 
tem z/OS, a zAAP does not 
replace the zSeries' general- 
purpose central processors. 

Instead, it operates with 
them asynchronously to exe- 
cute Java programming under 
control of the IBM Java Virtual 
Machine (JVM), explained 
Wyman. 

zAAPs can also be installed 
on the earlier z990 mainframe. 
But in order to take advantage 
of them, developers must up- 
grade z/OS to version 1.6. (The 
zSeries 890 is a smaller, less- 
expensive version of the IBM's 
zSeries 990, aimed at large 
enterprises.) Future versions 
of zSeries also will include 
zAAPs. 

DRIVING DOWN COSTS 

Offloading Java workloads to 
zAAPs eases the demands 
on general-purpose proces- 
sors, resulting in lower costs, 
said Wyman. A zAAP costs 
US$125,000 compared with 
about $450,000 for a general- 
purpose processor. 

General-purpose proces- 
sors have IBM software 
charges associated with them, 
but zAAPs do not. 

In addition, IBM claims 
that integrating the appli- 
cation and the back-end server 
on a single mainframe server 
further drives down costs. 
Doing so reduces the number 
of TCP/IP programming 
stacks, firewalls and physical 
interconnections and process- 
ing delays associated with dis- 
tributing applications across 
multiple smaller servers, said 
Wyman. 

Wyman added that develop- 
ing and deploying Java applica- 
tions on the mainframes looks 
and feels identical to the 
process of doing so on smaller 
servers. "Java applications are 
running a zAAP, but they don't 
know they are." I 



www.sdtimes.com 



Software Development Times . June 1 r 2004 . 



NEWS 



15 



Diamelle's Service Oriented Framework Builds J2EE Applications 



BY YVONNE L. LEE 

Diamelle Technologies Inc., a 
company specializing in Enter- 
prise JavaBeans, last month 
began shipping a framework of 
modular component suites built 
from EJBs for creating business 
applications. 

That framework, called sim- 
ply Service Oriented Frame- 
work, consists of components 
in the areas of e-commerce, 
customer relationship manage- 
ment, content management 
and identity management. 
These packages in turn can be 
used to build sales force 
automation, customer service, 
order management and catalog 
management applications, said 

Fuego Updates 
BPM Offering 

BY JENNIFER DEJONG 

Fuego Inc. updated its business 
process management suite in 
late April to version 5.0, 
enabling developers to deploy 
FuegoBPM applications more 
easily on J2EE application 
servers from BEA Systems Inc., 
IBM Corp. and JBoss Inc. 

Developers want BPM soft- 
ware integrated with their 
application servers, said Rick 
Mattock, vice president of 
product strategy at the Piano, 
Texas, company. "Why learn 
another tool when I am already 
invested in WebLogic or Web- 
Sphere?" he said. 

The previous version, 
FuegoBPM 4.5, replicated an 
application server in the prod- 
uct's stand-alone engine. But 
developers did not have access 
to all of the services that 
WebLogic, WebSphere and 
JBoss provide, Mattock said. 

Also new to 5.0 is support for 
the Business Process Execution 
Language (BPEL) and Business 
Process Modeling Notation 
(BPMN) standards. 

Pricing for FuegoBPM 
starts at US$75,000 per micro- 
processor. 

Mattock noted that while 
BPM standards are important, 
they are still emerging. For 
instance, BPEL addresses how 
steps of business processes 
interact using Web services, but 
it does not take into account the 
human interactions involved in 
a process. "BPM is about how 
people and systems interact 
holistically," he said. I 



CEO Arun Shah. 

Diamelle also offers indi- 
vidual packages in each area in 
addition to the full US$40,000- 
per-processor framework suite. 
Shah claimed his company's 
framework can build between 



60 percent and 80 percent of 
an application's code by sup- 
plying the server-side func- 
tionality of the applications. 

According to CTO Suneet 
Shah, the rest of the coding 
involves building the navigation 



and user interface. "Somebody 
still has to build the actual 
screens for these things," he said. 
He said that applications 
designed using the framework 
could be deployed on any appli- 
cation server that complies with 



J2EE 1.3 or higher. 

The framework meets the 
Web Services Interoperability 
Organization's Basic Profile, he 
said, so that finished Web ser- 
vices can interact with both 
J2EE and .NET Web services. I 
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Black Duck's Product Gets New Billing 



Company renames, repositions tool for intellectual property management 



BY DAVID RUBINSTEIN 

Black Duck Software Inc. 
might have appeared calm on 
the surface, but below, its feet 
have been paddling like mad, as 



the company has renamed and 
refocused its product. 

Black Duck sells software 
that helps companies manage 
and mitigate risks to intel- 



lectual property. When it was 
announced in January at 
LinuxWorld, the product was 
called Black Duck Enterprise 
Edition; now it is called 



protexIP Suite, with a devel- 
oper tool and registry, and is 
sold on a subscription basis. 

CEO and founder Doug 
Levin said Black Ducks software 



Cross Trainer Software. 
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is gaining traction in companies 
that desire to use open-source 
code; with more than 50 differ- 
ent open-source licenses to keep 
straight, Levin said companies 
have been wary about inadver- 
tent or malicious code violations. 

He said they "are looking for 
automated solutions, not lawyers 
with IP expertise or insurance 
policies to protect them." 

The protexIP knowledge 
base now has more than 160 
licenses, including 52 OSI-cer- 
tified open-source licenses, 70 
other noncertified open-source 
licenses and proprietary licens- 
es from Java vendors, Microsoft 
Shared Source and Intel. 

In addition, the tool provides 
wizards that can be used by com- 
panies to create and enforce 
their own rules about licensing 
for development teams. 

OUTSOURCING AND IP 

Aside from confusion regarding 
licensing, IP issues often arise 
when development projects are 
outsourced overseas, where 
developers aren't always respect- 
ful of intellectual property rights 
and where companies don't 
always have tight control over 
where the code in an application 
is coming from. 

The protexIP Suite consists 
of protexIP/Development, a 
service that scans code and 
detects any open-source or pro- 
prietary software and automati- 
cally tells the user if there are 
license issues that need to be 
resolved, Levin explained. 
Companies normally install this 
service behind their own fire- 
wall, he noted. The service inte- 
grates with the Eclipse devel- 
opment framework and with 
the CVS version control system, 
he said, and has a new com- 
mand-line interface for devel- 
opers not using IDEs. 

After the code is scanned, 
the service generates a project 
license profile, which, once the 
software is declared clean, can 
be stored in the company's pro- 
texIP/Registry, which Black 
Duck hosts behind its firewall. 
"Companies need a trusted 
information service" that can 
help cut their exposure to legal 
issues, Levin said. 

A five-seat license costs 
US$2,500 per seat per year, 
while a 500-seat license costs 
$750 per seat per year, and the 
registry costs $1,000 per regis- 
tered release, Levin explained. 
It also includes online updates 
to the knowledge base of licens- 
es, software upgrades and sup- 
port, he added. I 
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Red Hat Desktop Linux: No Native .NET 



< continued from page 1 

clients, giving them mandatory 
access controls that developers 
can use to fortify systems 
against attacks from rogue users 
and applications. "And if they 
do end up getting in, SE can 
partition them into specific 
locations so they can't make sig- 
nificant changes," he noted. 

Red Hat Desktop will work 
with software from Adobe, 
RealNetworks and VMware 
and will bundle open-source 
editions of the Mozilla browser, 
OpenOffice productivity soft- 
ware and Evolution. 

As for the .NET runtimes, 
"we will continue to monitor the 
.NET clone situation but have 
not yet reached a final decision," 
added Havoc Pennington, Red 
Hat's desktop engineering lead. 

Meanwhile, Novell is bracing 
for battle. "We're getting some 
of our cannons aligned," said 
Nat Friedman, Novell's vice 
president of Linux desktop engi- 
neering, regarding how Evolu- 
tion 2.0's ability to link natively 
with Exchange or GroupWise 
back-end servers will give Nov- 
ell a strategic advantage over 
Red Hat. Enterprise customers, 
he said, "want to drop a Linux 
desktop in place and have it talk 
to the rest of the network, and 
we're making that possible." 

Also new in Evolution 2.0 
will be extensibility through 
managed code, something not 
possible previously. "People will 
be able to [use Mono to] pro- 
grammatically extend the appli- 
cations that are core to [their] 
collaboration infrastructure," to 
add workflow components or 
integrate contact and calendar 
data, he said. 

Miguel de Icaza, CTO of 
Novell's Ximian Services busi- 
ness unit, contrasted the com- 
pany's approach to handling 
Windows application migration 
with Red Hat's VMware /Citrix 
solution. "With VMware you 
run Windows in your [Linux] 
computer; you need to buy a 
[Windows] license, and you still 
get every problem. The advan- 
tage is having two PCs in one; 
the disadvantage is they are 
both slow." The advantage of 
Citrix, he said, is centralized 
administration, which simplifies 
app maintenance. Neither solu- 
tion permits integration of Win- 
dows apps with Linux apps run- 
ning locally, he said. 

The execution environment 



of Mono runs applications 
natively on Linux at Linux 
speed; there's no emulation, de 
Icaza said. The disadvantage, he 
said, is that it can only run appli- 
cations expressly developed for 



.NET, ASP.NET Web sites and 
ADO.NET databases. Because 
Mono does not implement Win- 
dows. Forms, apps written for 
Microsoft's Win32 stack will 
have to wait until Mono 1.2. "We 



have our own stack for building 
GNOME and GUI applications 
on Linux [and wanted] to care 
for our own user base first." 

According to de Icaza, as 
Microsoft makes changes and 



additions to the platform, so is 
Novell. "We're been adding fea- 
tures to catch up [with Micro- 
soft]. It now offers ADO.NET, 
ASP.NET and C# 2 features 
[including] generics, none of 
which was in the original plan. 
It's a lot more than a compiler 
and runtime; now it's more com- 
plete and interesting." I 
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Puzzling Plethora of Proffered Protocols 



* continued from page 1 

part of this grand plan that will 
work together. End users need 
a reduced number of specs that 
will work well together." 

OASIS has 59 active techni- 
cal committees listed on its 
Web site along with the work 
from 11 completed technical 
committees. The W3C has its 
own list of current activities in 
the areas of accessibility, archi- 
tecture, interaction, quality 
assurance and technology and 
society, along with 15 closed 
activities that fall into those cat- 
egories. 

On top of this, vendors — 
particularly BE A, IBM and 
Microsoft — have promoted 
specifications on their own sites 
as standards. 

"What this indicates is that 
Web services and interoperabil- 
ity is a complex undertaking," 
said Dana Gardner, senior ana- 
lyst at The Yankee Group, 
based in Boston. "You need a 
number of standards in many 
different things." 

In the past, a vendor con- 
sortium might make a single 
specification and try to in- 
clude all potential issues 
involved in that specification; 
now that situation is reversed, 
said Corey Ferengul, vice 
president and principal ana- 
lyst at Stamford, Conn. -based 
Meta Group Inc. "Web ser- 
vices attack things in small 
chunks," he said. 

Not only are Web services 
specifications being handled 
in pieces, but the process has 
been turned on its head, with 
vendors coming out with prod- 
ucts and then submitting 
aspects to vendor consortia, 
rather than a group coming up 



SAMPLING OF WEB SERVICES SPECIFICATIONS 



SOAP 1.2 



JSR 109: Web 
Services for J2EE 



JSR 172: J2ME 
Web Services 



UDDI 3.0 



WS-Attachments 



WSDL 2.0 



WS-I Basic 
Profile 1.0 



WS-Security 



XML 



W3C 



Java Community 
Process 



Java Community 
Process 



OASIS 



IETF 



W3C 



WS-I 



OASIS 



W3C 



Protocol for exchanging information in a decentralized, distributed 
environment. Includes envelope, encoding rules and a way to represent 
remote procedure calls. 



Defines the programming model and runtime architecture 
for implementing Web services in Java. 






Provides a model for J2ME client communication. 



Defines a set of services for describing and finding out about organizations, 
their Web services and the technical interfaces to those services. 



Provides a method for encapsulating SOAP messages and making 
attachments to SOAP messages. 



An XML format for describing network services as a set of endpoints 
operating on messages containing either document-oriented or 
procedure-oriented information. 




Set of named and versioned Web services specifications and clarifications 
of specifications and interoperability guidelines to promote interoperable 
Web services. 



Adds to SOAP protocol mechanisms for message integrity, message 
confidentiality and single message authentication. 



Markup language specification for Web services; is the basis for 
industry-specific languages. 



with a specification and ven- 
dors writing to it. 

"There's a new order to how 
the large vendors are approach- 
ing standardization," said Yan- 
kee's Gardner. "What we're 
seeing increasingly is that com- 
panies will create their own 
'standard,' produce a product 
and submit it to a standards 
body." 

According to M eta's Feren- 
gul, "Very simply put, the rea- 
son for all the standards is there 
are a lot of vendors with com- 
peting beliefs." 

Some of the impetus for this 
reversal came as companies 
watched when Sun was asked to 
open up Java, Gardner said. 
"When the people said to make 
it a standard, Sun said, 'No, 
standards bodies are too slow. 



We'll create Java and take in- 
put from other companies.' 
Microsoft and IBM said, 'We 
like that.'" Those two compa- 
nies used that experience to 
spur their work on WS-Securi- 
ty, which it submitted to 
OASIS, he said. 

In other cases, such as WS- 
Federation, WS -Eventing and 
WS-Discovery, vendors have 
released a specification and 
made it available on their Web 
sites without submitting it to 
any vendor consortium or stan- 
dards body. 

IT'S ALL ABOUT MARKETING 

Vendors use such specifications 
both to test and to promote 
their products, said ZapThink's 
Schmelzer. Microsoft is spear- 
heading WS-Security, but it 



Apple's Developers to Catch Tiger by the Tail 
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year were first-timers," he said. 
"The vast majority had been 
programming on the Mac for 
five years or less." 

The conference also will fea- 
ture expanded IT and Quick- 
Time tracks, as well as a new 
scientific computing track. 

Previously, the company 
had geared the tracks at its 
developer conference around 
specific technologies, such as 
Cocoa and Carbon or Quartz, 
but now it is also building 
developer tracks directed 



toward specific types of devel- 
opers, said C.K. Haun, senior 
director for developer techni- 
cal support. 

The new scientific comput- 
ing track follows on the heels of 
the IT track, which was intro- 
duced in 2003. It will focus on 
developers who work in grow- 
ing industries such as biotech 
that have to perform complex 
computations, but might have 
had to use separate computers 
for scientific work and for gen- 
eral desktop applications before 
Mac OS X, Haun said. 



The QuickTime track will 
focus not only on those who 
develop applications using 
these technologies, but also on 
those who make content using 
them, Okomoto said. 

Other tracks are application 
technologies, development tools, 
enterprise IT, graphics and 
media, hardware technologies 
and OS foundations. 

Okomoto emphasized that 
Apple engineers who devel- 
oped the technology conduct 
the WWDC sessions for atten- 
dees. I 



doesn't have any security prod- 
ucts, he pointed out. "They 
can use the fallout from the 
spec to determine what to put 
in products." 

BEA uses the opposite 
approach. "The right order is you 
innovate, you test it in the mar- 
ketplace, then you standardize," 
said BEA deputy CTO Benjamin 
Renaud. "When we innovate, we 
know very quickly what people 
like. If they do, then we take it to 
a standards body." 

Proffering aspects of its 
products as standards or avail- 
able specifications may be 
BE As way of raising its profile, 
said Bola Rotibi, an analyst with 
London-based Ovum Ltd., but 
the danger, she added, is that 
BEA may be talking about 
specifications too much. "You 
shout wolf through everything, 
and no one listens to you when 
you have something." 

NONSTANDARD 'STANDARDS' 

Another danger is that these so- 
called standards end up being 
anything but. BEA has been 
criticized because many of its 
extensions have meant Java 
applications written using those 
extensions aren't able to run on 
other servers. 

In addition, competing spec- 
ifications have arisen, even in 
the same consortium, said 
M eta's Ferengul. 

"It's not uncommon to see 
two or more standards attacking 
one problem," he said. "Com- 



panies are proposing standards 
and letting the standards bodies 
sort it out." 

Even then, a group may 
have more than one group 
addressing a problem, said Zap- 
Think's Schmelzer. "It doesn't 
take that much to start a work- 
ing group at OASIS," he said. 

All the standards, specifica- 
tions and vendors' extensions 
posing as standards have left 
some developers confused. 

"It's ridiculous," said Scott 
Metzger, CTO of TrueLink 
Inc., a San Luis Obispo, Calif., 
division of TransUnion LLC. 
"OASIS is just one [vendor] 
group. There's the whole JCP 
process, W3C and the relation- 
ship between them all." Never- 
theless, Metzger said he was 
interested in industry specifica- 
tions, particularly those that 
deal with security, an issue that 
his company faces daily. 

STOPPING THE CONFUSION 

Analysts suggested several steps 
that developers can take to 
reduce confusion and maximize 
interoperability. 

First, said Schmelzer, com- 
panies should work with prod- 
uct vendors to make sure their 
interoperability and interac- 
tion concerns are addressed. 
"Let them know, 'We're not 
going to let you put these specs 
on the market that aren't going 
to work with other vendors',' " 
he said. 

They should make sure ven- 
dors know what their applica- 
tions need to work with and 
how, said Meta's Ferengul. 

Developers shouldn't track 
the specifications themselves, 
said Schmelzer. "There actually 
is one thing that end users 
should be involved in, and that's 
the WS-I." WS-I's Basic Profile 
is not a standard but takes spec- 
ifications from the W3C and 
OASIS and imposes strict inter- 
pretations so that products from 
various vendors interoperate. 

Both Ferengul and Schmelz- 
er advised that organizations 
code Web services using the 
bare minimum: XML files sent 
using SOAP and exposed using 
WSDL. 

"Go slow; do not adopt any 
application based on the stan- 
dard unless it's a standard that's 
final," said Ferengul. 

"It's better to follow than to 
lead," said Schmelzer. 

"This is why we're three 
years or so into Web services 
and the Meta Group thinks 
we're still a year or so from 
adoption," said Ferengul. I 





We've got your Cure 



vj ii !■:■• ii imiiI ;"!■■>! Hi if ^■drJin^r glitiuiF DompcwiHnr putih^hnr, Ilbh 

leMers^ed Mr 17 vears ai" ■deveioprnen!; expewiDe and crarletf 1he 

mp£l comply hri* 4>f ^tfrti[jgnen|3 *nywlst?ie- ftip sgi^ Qd mlGtfr#led 

jHu&and jHay components are powered toy a unique ancriitectuFal framework 

r rhfcl '.-iri^s chiM iii-smiIH-" - rnini'dhfi. M*4 rrflii«PCiriri;iri i r i|iln 4il,c:ii 

lasers, as #eii as the mosJ popular run-time environments Including .NET. 
ASBNFT. MWWfr. hM COM 

Hundreds oF thousands of ou* components are being integrated nto 
Hpf^aLJCnn unrldwjrfc. FnrlunE 5O0 cir^iniialvjnsi arrJ inthYKkial dEvelopeirsi 

.. J".iivi-.: ]oun|tew Ui r-,!.-;, iiyi" ftmptmertDm pftjriuiii Bwrtto 

lunctioflaility, ongoing, access to cdltjn^edge technology:, and kill support for 
^n"*«e' ri ft ictfiniilQB** FtJ^n our Mutton md SgfHnd |nbirii!rJh. 

Combine these benefits witfi our s^iemnse servtces including topflSHcfi 
fluppo^t aixi fliainwronce. fcotf™^ suij*cripTkM^ B some «>d*. »d 
escra* ^reemants — and yow ohobla has lust met tts am, 

It's tlm& for your Checkup %\ www_£GrnprtnenTdnH.::oni 



W& ^* 



More Tools. Endless Possibilities. 

DevelopnienL Tools ■ He«p Authoring ■ Web 5efl-5erv1ce 



f 
























■ Id 












<s l=i£r JDD4 'iD-TUtFitfiintc u_£. JU> riBTGi kuivkL M pnmn uma m- UMd by 0"i lepunw nn 



Over 50 Great 
Classes and Tutorials 1 . 

E) jilfinK tntiedi^t UruK System i>n a Wincgws-based Host 
Enbccrted Java Tccnnnlogj 3vcrvicrt 
Ful -Day TuMjNcil Jser ln|erf?::H I3h y m W 
Test Dri'jien Design Jc r Emb^rded Systems 
i*iternE Socuf iiy T Gf Lir^bcJ dcd Device* 

H i r ry -=^ll^r VV idnvs ;:- Sys-rrs 

F^r: " c£ :n m - re \*i "ricJdr. d E;^:cr: 

De«l0|i>ngW-HiJ?V? 

Deb jgging ErnJiEdcHC _ir.us SystETis 

Advanced Princip^s of Object Jnenial Design 

DesiRr Partt-ErRE tor hii^h-AivBilabilrty Embedded Systems. 

DuBCulajle L^L 

ThH h%3&Q Of MllteiK. £ xpl^inRd 

ConnfflriJig i/naed&tt L n-Jic tn Irternet and Enterprise Sy^^Ens 

BjHFing Winers H" Embedded ftppiicjtieris 

Cont>j£-jnn^ fnur RTOS Using Gluing Calculation 

Gbmt-QriMtEd DESgn far ^atlorip ndepthidencE 

MaslerlnE ;hv InL-yrn. p1 Ar::lil.KnMrE :r WindcmCF 

Usability nvpediims. 

Principles of Man-el Dr i-en Afcn:cctwl 

Using hsa Threads 

I up cnentng Better SELnty i-n Mraless Imbedded Systuns 

Cop ? fT£ With C-li^nting H^nu r?riElt5 

Pngrairmhg Considerations: Pain 05 

S&faty-CMtf al De'-tilcpne it in Java 

Debugging Tips and Tricks for Whdnws HE 

1 -j:-., \[? irv jk "rL::Jc: Svilvu . icc^:?r. e-j BcM "'at: :cl 

Embeflied Etesian: How Kuch Does Prctessnr Speed Mailer? 

Writing Device Driveralmr Embedded Linux 

C'lcosinga Real-Tine D grating 5ysl em 

Inbe^rat ir Web Serra* and W -re-ess Capabilities --n fcubedd-sd Systems 

Req jnemants Analysis 'cr Cirtaitded Eystems 

Dp'nrifinfi Java Storing nee 1r- Fmbed JeJ Sjfl1?ms 

Design. ng snd Gatinitng Window* CE .MT tcr Steal Ti^ie Pfcrfarmarxe 

Pmgraipmhg C-nnsiderations-i Fnck-El ?C 

Mihirnwng Context 5w1ch Times in Largs ftegis"^ Set Enuiranrrarts 

Rea'-Tlne Java Dcuc-JapmEnt Using ,ZSE WK 

Sottuftte ArrtilKtltfe Icr Ifel^grked Siei^l Media 

RbeI firrs PsrtcrnsncE n Eubsdted UratWyths, Legends and Fac r .s 

Sjslein Design: Ar^hiireitjn^ m Archetypes 



101001101101 



o 



001101101011 



Embedded 

Software 

Development 

CONFERENCE 



Hear from the BEST 
thinkers and practitioners 
in Embedded Development!! 



Stephen I ttfffitf 

Singihun [. Mufcnr is ;in in'nniiiTJnmilly mnzHSflEiijni!! nimumr En r:mn!isij{ 
offflctiviji -flii.ipTitionii.ij. Ap^roAchjHfl to s^ftwRio dnvoLopjooo: In S9B5, tun 

;>i]hl:LMtH![l (hi: wi-:3rlv TiiikiJ Won) MiiLLnr !rili]j|jv KtrUrhinH* rfriTiilnprmnil 

for Rflfll-TlTn-n Systems: in IWflfli the flist books defining ob]eci-QrUiiiTBd 
nnnly-i'--; ii ml :~\ 2002 zlxA\i:\iT\ih\i\ CM I.: A ['cmn^biein-Ti fiw MEicii'l lDrivcin 

AjdiLtKtuie. His Jarnu book. MDA RLftULed: Prlnnlplea of Modol-Diinm Axdafc- 

UiChim, W|| [ii:lili!;h[iil En 2004 



l.iirrv Oir.'dimlLnn ij. cum nf Ihn phiiHmrs «E K>hiYirm cli!Mi^n in uvj^ci 
cer.tnwd design, \ji7iy hrts pubLlshad more than tM artlcSes and pnprcra 

1 1 i-- li"i I ii mi 1 ; "it.i I m 1 1 i 1 : m rh<i ;iw;itiJ ivinziin^ Sii^w.irvi hs^r ..';r 
JA-ddLson-WasLar, IfflW], wriMen wEIl Lucy Lockwood; Ttua FooplowiiHre 
I'iipiT'j ll-'nir-Miin HjEI. 2001 k aevic Lhci .w^Rwhtt nn^inniis-in^ c:.;i_™ir:. 
Strucruped Dftflign [Prentice Hril r 1^7ft], wrlttBii with Ed Yourdoii. 



, p ^f.'i;/.^t■/ Bart 

"■■' ■ I - ■ ■■ ■ i. ""■ :« "■■ ■■ :■ M ■■" ■ ■■ i in "I "l .--.-i - ■ ■, 

I'rc^r^i-n-m::!^ n:;i^-ii^inn, ls Ihn hhiimlnr nild jiniviiiiMir nf Ss<itrir.n [JvCI, 
MiohiHil bftji spsDt mom thrm b decads devalopLng embaddDd Haftwnm. 
^■^ ^- 4ii;vi<:r tLrivtim iiiirl ^n'nm Invril .^^^llwiirr. E Ti= H:im wrilh::i Iwn f l r i - :■ i j I . ; r 

Ha Ji boots, E^rqgTuimnii^g ElmbdddBd Syvtenu is C an-rf <>+ ^O'RmJJyJ, and 
ll:i: JimlwidiJnJ H^flTcBms Ilirli-imiLry |I!M1 3 H :>:?kv[ wilh j\i*:± [l.insr.la. 



700% Embedded 
Software Development 





August 17-19, 2004 

DoubleTree Hotel 

San Jose, California 





■■-- 



Registration 
Now Open! 

farfy Bj r£ f 

Deadline 
July 9 




*f 




r-7^| Rub&rt C. Martin 
Robert C. MdJtiu is the founder oF Object Mentor Inc., a training company 
M-:Mii.iiil]^i]^ ii: |imiti,v- imrimviMNMnl ..nil nhji\:l c;ri4in3i9cl ■tciflwimi iJi-ni^rn. 
PuraMr Edltw-in-Chief oF C++ Report, he is tiw author w QD-niEtbor oF aix 
"iinLs, iiL-.Lidiiiv vf\':i liiznm- rVnwkirk, J\x.lri::ni* Mr;^nu:un:EiK in i'mnlicai 
(AddlAon-WeeSBy), and UML Gi: ]&va Pro^ujuflK [Prentice Hflji). Bob 

Iiilji p-.iljljuhtid i]ijzi;ns nfjiclErJmi iq variriLin Inich; jinirruiJ!;, ;i:iiJ is n n-^;iiJ;ir h;:-ii;ij.it ,lI 
tataroatiDjaaJ tanJerHicBS. 



i 



f KsjtIjti VBgbu.ouj IF PrseLdeail: cif -Opereys ]iug h a company that helps 

utiLtinc liLii.il iN:i'::riiJcl-!iiJ I.iziux .'.ynlniELV. fcirini £k a -wsJul-y nil Eif^nLuiiJ 
figure in liiu open-you™ LozncrcunLty ht.iJ Lhe author of Lhe moyl popular 
::'i!i>. :mi I ■! e i il 1 1 1 £ 1 1 3 1 »e E Linsis, ji c:nn]i]^ In Asniiznn.cnm: tlijLiiiJhifl 

tlnibadded Lbius Svfitems [O'RHiHy). Kanm la uJbQ the mainLainw or 
ihu- Linux "J'nwir TiiikIlLL, jincE Lhk Ihhh: .uiLm:l«i] ;im ;i SiiiiomI .Si3::pnr , .:ri|^ MmriEiLT In 
the CE Linux Forum.. 



Silicon Valley Location! 

J'hu biUublMud SuftWahJ DiSWilupulUIlt 

Cnnkronnn will *w hraJd m thn 
-J..,.|i_« _:« . id; . ii. Li I- - l.i ..: ■.:!" 

SiJacnn VnJJoy- Tho iotd Ib dcwn 1o ih-o 
StiJJ Judfc LsLL-J-UaLiutiaL AJjf^Wt, JiL-Xl tu 
VS, 1LI1 ruid jrunc n few bLnrJcjh fmm 
I-BED. TSi-rs bu-1fl3 provider a coiopil- 
rnrmtiiiy Airport riiQllJi? sp ^vmll £n 
ample pafldog. ChowQl&WD Sao ]cria 
in jw*1 Tnmn^navnty; 




Larry Constantine + Stephen 1. Meffor 
Michael Ban * ftrierf £ Aterf/ff 
ta//ro Yaghmour • d/itf jnany more/ 



Produced by 
BZ Media 



Software Tesl 

^2 StTcrttinnajioc 



Merf/J Sponsors: 

electronic BECMI HIC JX 

design pmnms ttfi 



. 




luTS 



J n M 1 1 fl l 



PRODUCTS 

Corijfogence 



Extension 

MEDIA 



RTC 



EmbeddedMarkuL 



H3 ffife 



To ejfftM or become a sponsor, 

Contact Donna Esposiio Of Tgd Bahr 

4 15- 785-34 19 5J6*922-2!GI xlOt 

tfespGsilB&bzmEtfis. cam tetl&bzmedta. com 



Learn More Today at www.esdevcon.com 



w ■ w. i a It 1 * ora r.i_ cti m 



ADVERTISEMENT 



Software FX gets a taste of its own medicine 

Self implementation increases understanding of customer needs 




Must developers iigrw that ttuj 
lwp Lliin^ vwj cnn cnunt ^n 
Willi rnr|n iq lih^r It will f hanfiP 
Wlwn chants happen, most 
ljI u> rJun'E kii^f lhi j Iuxim Cu 
^ii IhriKi^h **.K'h lii^ ill mhIi- 
AIeIiciui^I ctHilpoltclfcli jrcn r l 
jn juiulutt" n^uNOttlunt lul 
■ k-vHiiimib-iir. i\urv i -in ^.Wkv 
yoiislgnlflcanl tlrTW when 
milking i_odi- Lfi-nn^L^. 
ComporHfibi reduce Ehe 
munrlniw pnRinwnnp. Ih.il 
qfc»uvln|irff? wnrry flhnvt like 
purtnbility^ " ntA^ufruki lity. 
MjiI.lIiiIiIi, .anil p^riunn.ini **■ 

Arid rtur/i ^ bi^ Jd-.ini^. 

Sa -f V«u llimL uf LIllllpLPlL-nh 

ick as sumelJUnR I h.il el ircun.iiK 
Iho need 1d wrln? r_ode P bul 
instead dv sumcttimg that mdiYw 

iKp pmrp*^ n[ ^ri|inf^ rnr|p in .1 
l.ir^jrf wtJm Ti.m^^rnblr: vnu 

may h?w k*ime up vritti a jnljd 

■::nini luMiin. rhe* uuilnsl.9inJiri^ 
llUE KdUiiU J FflntpiWftnl-tfcitad 
jppliLJEkm U i -i i| :- >i l.ii i~ in- 
LtetiiuM- HjrlMfbuUy lu-ld yuU 
la, IiliI Iipt.hhp v»xj undpr&fmrl 
ihD henefils le brln^b lo Iho 

tfLM^UpfniTlC pftM:e55, 



little problems ax oonc-L-mr 
eorawrii*ifl Chart F* *u 5 fnyfirfcl 
nt diHiTi c -TiiirrF-= like- 5QI. 
XML ^nd nc-^1 n'to c^minr^ irnrn 

fick'rn.il cEiMri|?u|nrs. Ji mi I. irk. 

I '!<-". ilidn'l irjmr" .ins *w urily, 
ptniViniunciO 1 or m^Lhllliy 
luuta; ui LUtNjjLmi .In ml 
IMiihllp, ohl fll.il I h\ lTt^. 

itkw fif avhlch iA*fe Bp^ilrMle 
Ittmomis when w-L- decided 
tLi miita the &witdi Id ,MFT. 

In^ipprt. sve tfukkly flcaliraf oip 

dk J «.'l«pcrt- SJJt.'rct jn unu^U^I 

.1 Hi II Mil C3l I IIIW* K i »l Ii "!_-; I II I ^- ■ I II — - -- 

rUlti ;i2itl Iciflir. ihOJ ViTXiJd llk'lp 

uppci IruiMffcfnuiil vibUjlJiii 

.l?M.lh I l~l.lL llWlJtt( . 1 1 1 b.' 1 1 1 1 i 1 1 *i Itf 

m.ikp crirlrnl hi_nlnefi.d«dikmfl, 
L'UimR^cl^ we concluded that 
dL-veluptrs -luju-IlI hum diwn:t* 

ikMn^pk'p-t firim L-nHinp -ind 
rontigurin^ rljal^-prr^n'.ilirwi 

rtiriip*>nrp& 5ini?e ihcr were 

i ■::-! j| ilt=L J 1 1 i r+— : 1 1 v In Hit? cLiI.i 
tvUM Birth pfttfeii.. tlttrttore, 
thuY LLkjIJn'r L-rribrj£_D ita LudL- 

bdtlhLl lLrflL4TJji Lhjl WpdfdLfo 

tote frfim ll>F|*PwnlJlifin Uypt. 
Fm rx.iirrplo wi? WfUiwd durt 
mtirhtjrii to bv Loliirc<J atiiioidinK 

I- 1 .i i i-rl.hn i niiihridin ,|Jidl 
hi- -, iii-. rli ilki '.mi i-.i|-.-il-iili1iFs lo 




ihe pyrtin^ yf 
Snltw.irf hX\ i ■::>]) >:-fr.i If inl-r.inri 

Hi A^P.NEl dur wt f.amt- Eh 
qSjR^pnca and riiilliu wful 
.Nt! Ikitl Lu Ltfl'*rr and tfw 
rlullen££* inM>l v ed wi Hi p>li*ifi 
a funclioiMi 1 applk^tiofi 1r> c i 
iww platform- Tu us it wdi l^k 1 ii 

fii^J* nf r^r^ DWn npwtfi wnt*, ,ia 
mna nr ngr inlrjrHt rc^mrli wm- 
Liu ill u\inx imr rw\n pr^fctrt 
Chjrf FK. 

Inroitttini^y. out dciflupLxE *iad 



irlTJtw.^t 

■ Ujp. >i ii ii. 1 .' ilk A, '.L'iziil J 

iliuf Ini* -^f |Ki bir.'i r I j niVr 

nivAv» '.V f\Jiiifru,VJT 

InH ihr nrxii nl %urh ^ilu.ilhnm, 
tfhiv h-irl hc> Eh- ilnnL- by i iiinnlK 
irr^z^ 1ii^ ll** rl.il.i .mi 1 1 1 Klni; m.k Si 
cfHvfiNnm Lnlui the- jppikjitlim. 

ThibiWJV ihtir n^rnnuxhn^ effort 
wii^ inAfsJed tn prwkinR Itie fli^rt 
rcflecl 1hc^c conditiafrs. y^ctthey 
wl^i- jble tu Lvmp up w-in+i H\tk 

iJirtDffijiJiinn i K.irK jn tprrrw ■ ■! 
prr^raiplinn. Thr Chjrt FX Ipf 
,IV[TF Wifiird 1 1- 1 k. ■ m,|. ■ 
i" i *i-it wm- ciui i.i 1 1n lH hievirt(( 
i l'i-> |^i"j.iI ivlih llEilf nr na 
dovtileipmcTit offDrti cw» thcli- 



part To u&. that was -j fnijur 
accwupli^hment *ince O^ri. F5( 
I'm- NET pmvirlp* ""^'^r hi II I 
propertips. mcthc»d«; a"nd nvnti 

ihii"! thfi, ihiln'l Vi.iti.4 1 In I < ■■ i r n 
I >r'ii ii-m- llitn, 1 1 lull I Ik- iiNJsim-lLw 
fulh uui IlhiI. rhr Li-r imil^r snu 
■ ■■ui 3u "I" i v.hun | lulling. ■■■ 
L ||J||i|> . .llKii* kl .MH *i HpKHIllI 

sigtilikaiH f^nurf^s feirflifls 
how rhird-pdrt> tymp-onnvts 
woii dind IjcfkTvu. 

f rani prjinnry f^wr En SprrinJi^r 
hhlWW^T, in fhv fnij wl b iuunil 
oiiftri^w in ri ^NkKiliun ^vhl-re , 
flh& CUtJ, Jiirf WpiTiJllv itlc> 
tl'urcs-, were Li|Jialv bwUld tu IIhj 
dLil.j Anil if H ii-mjIe, M jJ4y 

IfrusloiSfi i^ite rtainfted r>r iiny of 
cw* da1a -.tscif chanyLcd. Ii hod 
Ihii tjernenduuy ripp>1iii|{ L"Tfet1 

1 h r r 1 1 1 c, I ■ ^ >. : I rinr rnrU- \S> Ln#vv 
"hi-; r nihnlinn wfui rl m.-ik^ ni.ir 

imTflnel wnnlik- Un inpond tu- 

iiiliiff Epu^iii^H- rt**rtk. Iii ii|Ii*t 
WOrt&j Jri flippElulkm lJi.il 
Jhhuu^li Luill with ihu Lik:H 
.Nl" I IbM-lllllll':.^!. VVJi ■fcs-is-UiU 
^Ih^l ih.Hh rPCi|ipff|l! lit rh.1R££L 

This iituatiun rtsachtsd Llriirndtii 

I o i| ii ul M ii»> v, him -i 1 1 j i i l^v«'li ^ *-r* 
v*vrr InvDtlinp 4-niinll"^ -hj^iiK 
Irs in^ ?n sjtLfI'v rrn* rivlnrnmHiin 
n^h\i^ -i-ifl MLir -*jlt*>. Ti.nkfliTfcx 
. ii ii I --i i| i| ii ii I i Ih^xirl iTihMds. .\T thi^ 
i.-.i.l Ii..". ■■... I". .iii... i;m. . :h.il 
We ■.v'.'iu ilivuilini^ Iiuiii iht: 
rrJ-lfi.JMill |irtt7)Kl iliul WH¥ SJ.il I 

iflir trrim coflipletlnn. 

The ^luLiun. Iu» ws. wjs simplu: 
(Th'.Tn! FX f rtrrrTrnn^. 

VMit^i *h^^4" ^-xlk j ntK3nf , C."h;iFt FX 
jirniviflK f.iihn- Irilt-^r.tliiiN Eu 
Cn^rM^:r mr/nt- nlL-dilln^rullv 
iSiCll v-uur dJtj.. Trfcli mLvjrn 
devBlupen are rmi lafig&r 
fequlted lo ^perwj cnAJivil&ss 
haun crjfifp[pjring a generic 
(.Kutiii^ M.ici|kini'n| |n >|jixiiii. 
lIiP.i. ImfPLnd. lhf«- rh.iri FX 
iYlrniinns «H br *ti|rhrd 

-.. ■■■l-.-l -i. |||.-;>! -.| ■ ||., .|i|||!: |-. 

en.ililin^ i <ir^|.inir-.iEiiiris In ifjm kly 
..mrl tH"i.wcwnlcjJly ^m ,n:ftitiri 
bpLt'iJiicd iululkjnb that nwed 
uinque Uusirltrfb iteftfe. 

T« the right an? ii series »f 
snjpihub niliout ihu* Chart FJC 

I isJi-r^iLifiri, jinrf huw w-** svimi^ 
jihlr In rnniurnr ihrm Inr ngr 
c^n iK.-nLtit. In rfic lti4. Churt f\ 
luii I Ihf curf hjr iiiul .Lik-il i iv. 



How dun* manVelinj; ketp Irack of wh*h* product idl' 
lhit ■• firni-yiihT^I m. .i ri iii rr-ni epi *m" i^^ics ih.n inir^r.ilr- i1.ii ■ 
^nrrtfiur infrin.il pmil 'ri mIfp 4^lriri .n wi'll m rbl.i cnrTfmg.drnTn 
P-nrj-iitil ^IimI^m.- i- i - . . i - Ii df ^huli h.ib ih, imn ^hrififnl II 
a>-^frn. VVn CTiiitd up wrih .ir V5P.^FT iaj.,-- I ~i ■ i B ■■m.iIlI 

i I,iI.i iriiili A ^.*l■^fL ill r^u. .- 

•mluflirig Sf)* .iiicl Wft. *mi 
rn.i| i Ihtn H.-.l.i uurij] uruvrfinlK 
wjppjrftd 5VC im^n-. Chart F?l 
Mj^a ™ mil I ^*ii|ik lulci - dn> 
il.il.i nuki- .iml « i d i|i I jiliy,-. 

^llM'. J,- 1 P. 1 1 1 1 ! I J.1.'- .mk! -. ii -,i-n ?||.1I 

v*rnjikl nlbrrwiw^ lake- wrHb lu 
■ ■nil Ch.c lYiiah iiiii ir n:.irHrii ,ir 
■rtv.v.Julli.TJ.rtrih.tun-b'mapi-. 



Hiw dp aurr nunagm kIht Jind Jirp our mIm daBnf 

V\"u OtAf-t r ndbkiT ijut puml ijt ul» hiLltpi :\z\r ^ SQL Snvtir 
Aii.iIt^. SijfifkMI >.iml nil.iy.r^lM.J c;hj*1 f K f.H AP .irri.l .^X.IvV!J) lu 
i niinn I In ,i hm.iI|: -r1irnfwi*k ui.it ^^^^^^^^^^^^^^^^^^^ 




r I.i i,i hii. 1 1- ' r i,M ic ii.iLiqrilnd 
vvhhciiif .xJdilinnjI ctlncti Inim 
inn (IiwIi^HTy. Tk- tirrUk; 4 
s-iin|ih: .^P.NFT fi.1^' lh.il 
i -n\ H - ?^rs a chiiii ii-ilh a pfj.\ 
vrt iirnplr„ uwr mlnHiicf lh.it 

.1 I't.t- :E.IU ly-uillln; lilbllii il'.T 

and JiL-ii^. 1u pic-ufii lI.iIj 

^*VV|. Illrfl H'HIBllllHI-lrHTLVlLll.-LW- 

mmlh* In *ot1p. Lnnm rnnrr Jf 
MAA-^^nttVfcj i-prh.jmrrvril.ip 




ChvifX 



Hew do we analyze Umiuncb of IcarJn 1 

f\i|»g|jlui^ijnd Liiiir-^iiun^^ riirfrliris^ilHiii Ailti l,ii|»i- 

hbtijfttjr, lltL'ttidrl |ijukh-k.k^u.il and il is iJINcjIi lu-n.'ji.l. 

Mahiilicil y.lhhvi lu in- I'ncui-fHi 

■ I ii... -i.ikM^. ! p. i , 1 1 1 1 -. , .ii'-ii' ..■in 

i l.iiri mirUlln^ nn fimcKfiH :h,ir 

^.nuraDL 1 Idiuu jmuunb iii *LiL± 

like 1 mil iliftvnliiarfe- ajm\ ^rh 

ti.irtii.. Uy- hi mm. I il-.. ..!■ i" 

ttiH '.l.ii.ih.iw j.nrl Ihr t Ji.irl I k 
5^.il'htn..il ^"leniinn r|Lmkh 
pnwki'Vt ck^TiutNA' liJhiiiltv, 
i nru'l.nliiii^ .mrf STf iirurli. 
jmnn^ ndicrji C!rt mnrr Jl 
w^w.irjnift.jrrrytum'MjIlrikiil. 



I Ui-vr can -vuir ttufl tippcl Hmmedfalrly lo HJ^pvl npqiwfft? 
< I up drvrliinrr-s h.nh .i «r-.il-hmr nl.il.i r^lr^riirm .ipipfir.ilirKi imrn 
ini Iird ■ nc^-;fii> i;:*, \i i ■ i ^"rti j N^^nLiP 1 |nwvi^ iinrt q^ip'irt .vri>inK 
tiiJl urn Chart TX fScaf>TiMw> 



!, f||il|ll|||il||l_ 

I 

I I 
I-, m M1l_| 





>d.ixV!-i.iii- in-ilu_Tiiiih il.jl.J- 

■j'iii.ili.L- In i rr.ih.- i lu?l* wilh 
-i|iT. -..i|QHii! :^h|ii^ ihril ^rp 
■ li-pl.i'-:-:! in rr.il linir in ihr 
bKWwfi- v* HN-.kjje dHh ntwiS im 
nunudlh rL-fvudn. Sut- nina at 
WW^WlW.l^l!i,CM|fcL''r^il!iirtv. 





&P^ ■ " 



VE4IV5 



SoftwarefX 

^ny Chart, ^nywrte/ie/ 



www.soulwvi ref % .com 



In \he US: iBfflli ,^Z^Z7fl ■ In ihc UK: *4A lOH 17 H05 S7.1T * In Clemunp [N5flO-Z4 27 P.^ 



i. fejfel I I a.^ K^MHpI k J! L 4 -Lb In II '-iTJPriiHf I I. 



www.sdtimes.com 



. Software Development Times . June 1, 2004 



NEWS 



23 



IBM Tightens COBOL, Java Ties 

Company updates language tool, WebSphere 



BY JENNIFER DEJONG 

Easing communication between 
COBOL and Java, IBM Corp. 
was expected last month to 
announce updated versions of 
the programming language 
Enterprise COBOL and its 
mainframe Java development 
environment, WebSphere Stu- 
dio Enterprise Developer. 

New to Enterprise COBOL 
3.3 is the ability to generate 
XML code from COBOL data 
structures, said Jim Rhyne, an 
IBM distinguished engineer for 
e Server tools, technology and 
enterprise modernization. The 
previous version could process 
inbound XML code, but devel- 



opers had to write by hand the 
outbound XML reply. 

Support for two-way XML 
enables COBOL applications, 
such as those that process insur- 
ance claims, to interact more 
easily with customers who 
access their accounts from the 
Web. For instance, a COBOL 
application can now include 
ancillary data, such as a photo- 
graph of a damaged automobile, 
in a customer file, said Rhyne. 
"In the past, COBOL simply 
peeled off the photograph." 

Version 3.3 lets mainframe 
developers create EJBs in 
COBOL using the mainframe 
version of IBM's application 



server. Also new is support for 
version 8 of the company's DB2 
Universal Database for z/OS, as 
well as increased debugging 
capabilities. 

The new version of Web- 
Sphere Studio Enterprise 
Developer, 5.1.1, lets main- 
frame developers create Web 
services and other components 
without having to master the 
intricacies of Java, said Rhyne. 
"We are plugging the hole 
between J2EE, the connectors, 
CICS and IMS." 

Version 5.1.1 supports Enter- 
prise COBOL 3.3 and Enter- 
prise PL/I 3.3, and z/OS connec- 
tivity and queue management. I 



2EE 1.5 Sets Sights on Easier Use 



+ continued from page 1 

approving the ballot to begin 
the JSR. It will not include any 
new technologies, but will be an 
umbrella over other Java tech- 
nologies, according to the spec- 
ification's road map site. 

The official JSR 244 Web site 
lists six technologies as being 
proposed for inclusion in J2EE 
1.5, but they will not necessarily 
be in the final specification, said 
Ed Cobb, BEA Systems Inc.'s 
vice president of architecture 
and standards. Those new things 
are Web Services Metadata for 
the Java Platform, Enterprise 
JavaBeans 3.0, Java API for 
XML Data Binding (JAXB) 2.0, 
Java API for XML-Based 
Remote Procedure Calls (JAX- 
RPC) 2.0, JavaServer Faces 
1.0, and a Standard Tag 
Library for JavaServer 
Pages (JSTL) 1.1. 

The next server Java 
version will include work 
from J2SE 1.5 and will also 
incorporate several other 
Java specifications that 
currently are being devel- 
oped, said members of the 
expert group working on 
J2EE 1.5. 

"These are not things 
that definitely will be in 
the release; these are 
things that Sun as specifi- 
cation lead thinks that 
should be considered to be 
in the release," Cobb said. 

Specification lead Bill 
Shannon of Sun declined 
to be interviewed for this 
story. 



In particular, Cobb and Ted 
Farrell, Oracle Corp.'s chief 
architect for application devel- 
opment, said the metadata 
specification and the revamped 
EJB specification would ease 
programmer headaches. 

Farrell said the Web Ser- 
vices Metadata specification 
makes it possible for developers 
to add annotations about the 
code and have those annota- 
tions persist with the code even 
after it is compiled. 

BEA's Cobb said that like 
Oracle, his company is part of 
the expert group on JSR 181, or 
Web Services Metadata, and 
would like to see the metadata 
specification in J2EE 1.5. 

EJB 3.0, which relies on the 
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metadata specification, will be a 
major overhaul to the previous 
EJB specification. It is scheduled 
to begin its final public review 
this month and to be finished at 
the same time as J2EE 1.5. 

"EJB has always had the 
stigma that it's not fixed enough 
or it's too rigid," said Farrell. 

"Some of the features of 
EJBs are easier to use by using 
some of the metadata that's in 
J2SE 1.5," said Cobb. 

In addition to supporting 
annotations, EJB 3.0 will rely on 
generics and extending the Java 
language to include enumera- 
tions, enhanced for loops and 
static import, all of which were 
part of J2SE 1.5, which was for- 
mally announced last February 
and is in its second pub- 
lic review. 

The new EJB speci- 
fication will require 
fewer descriptors and 
instead use more de- 
fault settings, according 
to the Java Specification 
Request site. 

Since these JSRs are 
being combined into 
J2EE 1.5, their devel- 
opment will be inter- 
dependent and that 
could delay the individ- 
ual JSRs' introductions, 
Farrell said. 

The other specifica- 
tions, JAXB, JAX-RPC 
and JavaServer Faces, 
deal with communicat- 
ing XML in Java and 
with building user inter- 
faces, respectively. I 
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< continued from page 6 

by GreenPoint Inc., starts at US$450 for the designer interface and 
$1,250 for a deployment server . . . Hamburg, Germany-based Gentle- 
ware AG has released version 2.3 of its Poseidon for UML CASE tool 
that now can model more elements from 
UML 2.0, including ports, connectors and 
other new diagram types. The company 
offers a free "community edition" of the Java-based software, and 
also has paid versions beginning at US$249 or €199 per developer 
. . . DevComponents LLC has updated DotNetBar, a set of compo- 
nents that provide .NET applications with the look-and-feel of Windows 
XP or Office 2003. Version 3.7 of the suite adds Outlook 2003-style 
navigation panes. DotNetBar costs US$189 per developer, or $1,399 
for a site license . . . Compuware Corp. has updated its test suite, 
QACenter Enterprise Edition. The revised suite is unchanged other 
than the inclusion of the 5.2 version of TestPartner, which can now 
test .NET Framework 1.1, SAP 6.20 and Java 1.4 applications. Pricing 
begins at US$6,500 per seat . . . Gorilla Logic Inc. is offering version 
0.93 of its Execution Engine, a tool that 
can generate executable application proto- 
types directly from UML models. This pre- 
release code now can work with IBM's Rational XDE modeler. The Exe- 
cution Engine was initially set for a March release; no new date has 
been given . . . Canoo Engineering AG has updated UltraLightClient, 
its software library that provides thin-client support for Java Swing 
applications. Version 5.2 allows drag-and-drop user interaction, and 
also has implemented distributed garbage collection between client 
and server interactions. The software costs US$1,495 per developer, 
with no charge for runtime distribution . . . Toronto-based Dundas 
Software Ltd. has released version 4.0 of Dundas Chart for .NET, a 
server-based graph and chart creation component for ASP.NET and 
Windows Forms. The update can create animated graphs, Flash ren- 
dering and several new types of financial charts. It also allows devel- 
opers to create and reuse chart templates to maintain a specific look- 
and-feel. Pricing begins at US$699 . . . VanDyke Software Inc. has 
updated VShell, its SSH2 server for Unix 
and Windows. Version 2.3 gives administra- 
tors the ability to precisely define file trans- 
fer privileges based on virtual directories. Pricing begins at US$249 
per user . . . ComponentOne LLC has released ComponentOne Studio 
Enterprise 2004 version 2, its component suite for Windows. The 
update adds XLS for .NET, a component for reading and writing Excel 
files; a new docking tab control; a print preview tool; and enhance- 
ments to its WebGrid for ASP.NET data grid and spell checker. 
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PEOPLE 



Hector Ruiz, CEO and president of Advanced Micro 
Devices Inc., has been appointed chairman of the chip 
maker. Outgoing chairman W. J. Sanders III, a co- 
founder of the company, has retired and has been 
l named chairman emeritus. Ruiz joined AMD as presi- 
I dent and COO in January 2000 . . . InterSystems Corp. 
RUIZ has promoted four managers to vice president: Joseph 
DeSantis, who manages object technology development; Richard 
Deutsch, in charge of marketing; Robert Nagle, who manages sys- 
tems software; and John Paladino, who directs support and QA 
. . . AppForge Inc., which makes mobile development tools, has pro- 
moted Merrill Oakes to VP of sales and marketing. He joined the 
company in December 2003 as director of enterprise sales. 



STANDARDS 



Sun Microsystems Inc. and INRIA, the French national institute for 
research in computer science, signed an agreement to certify Jonas, 
an open-source Java application server developed by the ObjectWeb 
consortium, as compliant with J2EE 1.4. ObjectWeb is an international 
nonprofit consortium specializing in open-source middleware, hosted 
by INRIA. I 
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Microsoft on Devices: It's All About Web Services 

Trio of new APIs, development tools unify device discovery, use and interoperability 



BY EDWARD J. CORREIA 

Microsoft Corp. wants to 
change the way applications 
communicate with devices. 

The company is working on 
a series of new APIs that it says 
will make devices appear to 
applications as Web services, 
just like the software-based 
Web services on enterprise net- 
works and the Internet. 

Microsoft unveiled previews 
of three new APIs and a driver 
development kit at WinHEC, 
its annual Windows Hardware 
Engineering Conference in 
May, and plans to incorporate 
the APIs in Longhorn, the next 
version of its .NET Framework. 

Of the three, the API likely 
to be most interesting to enter- 
prise developers is Function 
Discovery, a working name for 
the spec that defines a consis- 
tent means of discovering, 
enumerating and communicat- 
ing with devices seen by a 
computer or its applications, 
regardless of how that device is 
connected. 

Such consistency is some- 
thing Windows developers cur- 
rently lack, according to Pete 
McKiernan, lead product man- 
ager in Microsoft's Platform 
Strategy and Partner Group. "If 
they're looking for a speech 
device, they have one API 
to go through. If they're looking 
for an audio output device, 
they have another, and another 
for an imaging device," said 
McKiernan. 
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Microsoft's PnP-X specifies a means for apps to discover and drive devices regardless of how they are connected. 



Function Discovery solves 
this problem, he said, by defin- 
ing a single API that communi- 
cates with the others, be they 
connected by network or bus. 
"This gives the PC or applica- 
tion a consistent picture of the 
device's state and metadata; it 
appears like any other Web 
service." 

To make this possible, two 
additional APIs have been 
developed, both of which must 
be implemented by device mak- 
ers. McKiernan said PnP-X will 



allow Web services-enabled 
devices to be configured via 
Microsoft's Plug and Play sub- 
system. "If you're writing an 
application and want to con- 
nect to a device, this will make 
the process easier. You can 
plug a device into your net- 
work and away it would go." 

McKiernan said that without 
more capable device communi- 
cations, current applications are 
limited, and illustrated his point 
with an accounting application. 
"If your application is going to 



print checks, right now all you 
can know is that every check 
got sent to the printer. There's 
no way to determine that every 
check got printed, and that it 
printed each check only once." 
Through a third API, Web 
Services for Devices, such 
device capabilities can be 
added by exposing event infor- 
mation back to applications 
they're working with along a 
workflow process, he said. "If a 
warehouse application is print- 
ing pick tickets, for example, it 



could get more precise infor- 
mation from printers, barcode 
scanners, scales and other sen- 
sors throughout a production 
line," allowing greater degrees 
of automation. 

"Both of those will talk to 
Function Discovery and that 
will act as a central library," 
McKiernan explained. "The 
developer doesn't need to care 
how that device is being 
accessed." He added that all 
original individual APIs will still 
be addressable in the future, 
but "it's a layer of complexity 
that we think most developers 
don't want to deal with." 
Hewlett-Packard and Canon 
demonstrated devices devel- 
oped with the new APIs at Win- 
HEC, according to McKiernan. 

Also included in the new 
specifications is Devices Pro- 
file for Web Services — co- 
authored by Intel, Lexmark 
and Ricoh — that defines a base 
level of functionality to be 
delivered on devices through 
a subset of pre-existing Web 
services. Microsoft also intro- 
duced for OEMs the Network 
Connected Device Driver 
Development Kit, a set of 
tools for implementing the 
Devices Profile in their hard- 
ware. 

Links to preview editions of 
the new APIs can be found 
at www.microsoft.com/NET 
/SmartClient/web_services.mspx. 
The company gave no specific 
time line for general release. I 
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environ ment that dramatically reduces the time 10 
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world's Jarg.ei1 hospital*. Cache la so reliable, it's die 
leading database in beaHihcane - acid h powers enter- 
prise app]icatiorj in financial services, government 
and many other sccioiri. 

We are InterSvsteniA. a speciaiis: in data rnnnigc- 
"lii: . t \\:ii. miv :o- h-\\\\ mm Mvi ""l" ;.r-. V. - pro'.i.iL 
24*7 support to ibur million asen: in fifi counlricK. 
Cache is available foi Windows, OpcnVMA, I julli 
and major UNIX platforms - and ii Li deployed 
on Evsi-emR ranging from two to over If^OOQ 
simuELancn^ huts. 
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Enterprise Databases: 
Mission-Critical Commodities 

When selecting an enterprise database, 
developers often choose 
price over performance 



BY EDWARD J. CORREIA 



Features, performance and stan- 
dards support may look great on 
a press release, but where the 
rubber hits the road for people 
deciding on database implemen- 
tation, the bottom line usually comes 
down to price. 

Paul Strange, director of software 
development at Selling Source Inc., 
which builds data-driven Web sites for 
retailers, said when his company got start- 
ed, price was the primary factor. "We 
selected MySQL because we were small, 
it was free, and because it was well inte- 
grated with PHP, our language of choice." 

That response was typical of develop- 
ers and even vendors, as SD Times 
sought to discover the thinking behind 
the selection of database products from 
companies other than the so-called big 
three: IBM, Microsoft and Oracle. 

According to Zack Urlocker, vice 
president of marketing at MySQL AB, 
cost is often the leading selection factor 
for the Web-based applications that are 
typical for MySQL. "We've had a lot of 
success in the midtier, with ISVs and the 
very largest companies looking to lower 
costs." MySQL is free for noncommer- 
cial development or if the commercial 
developer's source code is released 
under MySQL's GPL; otherwise the 
software costs US$500 per server with 
no per-user fees. 

Urlocker said that as Web-based 
applications have become more business 
critical over time, they also have migrat- 
ed from the periphery to the data cen- 
ter's core. But despite the database's 
importance to the enterprise, Urlocker 
contends that in the eyes of many com- 
panies and prospects, it has become a 
commodity, "and they want to pay com- 
modity prices and not pay for advanced 
features they can do without." 

IBM Corp. responded — and perhaps 
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contributed — to 
that commoditiza- 
tion in June 2003 
with the introduc- 
tion of DB2 Ex- 
press, a full- featured 
version of its relational data- 
base engine for Linux and Windows with 
a starting price of US$499 plus $99 per 
user. "We have worked to remove price 
as one of the roadblocks," said Jeff Jones, 
director of strategy in IBM's Information 
Management Solutions division. 

OPEN SOURCE, OPEN DOORS 

Aside from attractive pricing, Urlocker 
asserted that open-source gives 
MySQL a major leg up in terms of 
freedom from vendor schedules and 




operating system 
lock-in. "SQL Serv- 
er is a great product 
but will only support 
Windows. Because we're 
open-source, [developers] are 
not beholden to our development plans 
[and can] port it to lesser platforms and 
ask us to maintain it," which he said the 
company does routinely. MySQL cur- 
rently runs on about 20 platforms. 

Nevertheless, IBM's Jones claimed 



that a clearly defined 
growth path gives DB2 an 
advantage over open-source solutions. 
"If I push the limits of Express, it's just 
a license change to go to Workgroup 
edition, or expand into cluster imple- 
mentations with Enterprise edition. I 
am not forever bound by the limits of 
the small database I started with." 

GeoNorth LLC, a database consul- 
tancy, has learned to expect vendor lock- 
in. "The first question we ask is, 'What 
are they currently using?' " said Marshall 
► continued on page 28 
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How Some Vendors Are 
Improving Spatial Relations 

Special data types have given rise to specialty databases 



BY EDWARD J. C0RREIA 

Relational databases are not for every 
job. The emergence of audio, video, spa- 
tial and other data types have brought 
about new tools for storing, retrieving 
and tagging that data. 

"I've always thought of InterSys- 
tems as a specialist," said Paul Grab- 
scheid, vice president of marketing at 
InterSystems Corp., which develops 
and markets Cache, an object-relation- 
al database. "Our customers in many 
cases are focused on automating medi- 
cine, which is more complicated than 
automating a checking account," he 
said, and requires large amounts of text 



and other non-numerical data, plus X- 
rays and other images, all linked with 
complex relationships. 

Grabscheid drew a clear distinction 
between Cache and general-purpose 
databases from the so-called big three. 
"At IBM, Microsoft and Oracle, their 
mission is to be a complete solution for 
everybody. But they end up doing 
about 80 percent of what 80 percent of 
the market needs." 

Grabscheid said that InterSystems' 
object database is more closely tuned 
to the needs of object-oriented pro- 
grammers. "If you're a Java, .NET or 
C++ developer, Cache's object model 



is the same for the data in the database 
and that used in the application." 

PLUG IT IN, PLUG IT IN 

According to Jeff Jones, director of 
strategy in IBM Corp.'s Information 
Management Solutions division, IBM 
has responded to emerging data types 
with extensions to DB2, its stalwart 
database engine. "IBM offers extenders 
for managing exotic forms of data," 
including those for audio, video, XML, 
spatial and geodetic data types. 

"These go beyond the traditional 
capabilities of a relational database," 
Jones continued, "and help it specialize 




Medicine is harder to automate than a check- 
ing account, says InterSystems' Grabscheid. 

on handling unique forms of informa- 
tion and stretch its bounds." Microsoft 
Corp. and Oracle Corp. offer similar 
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Payne, co-founder of the Anchorage, 
Ala. -based company. "Often, people will 
buy a commercial system that has a 
dependency on a specific database like 
Oracle or SQL Server," which he said 
locks developers in for subsequent pro- 
jects. "That happens a lot." 

For customers that have not made sig- 
nificant investments in a database tech- 
nology, Payne said the choice usually 
boils down to cost rather than functional- 
ity. "Looking at different database flavors, 
SQL Server tends to fit the bill for small 
to midlevel organizations because of its 
low cost and simplicity of licensing." 

MYSQL NOT THEIR SQL 

After about seven years using MySQL 
exclusively, Selling Source's Strange said 
customers began requesting demo- 




Selling Source's Strange says price was the 
main factor in selecting MySQL: 'It was free/ 



graphic data from their applications, and 
MySQL hit a wall. 

He explained that the demographic 
analyses required queries across aggre- 
gate result sets that returned hundreds 
of rows instead of just one row, and that 
some of the values being joined against 
were not indexed. "We quickly learned 
that MySQL had a problem with that; it 
slowed down." 

Strange said that indexing and mod- 
ifying the database structure improved 
performance a bit, but not sufficiently 
to solve the problem. "Once we hit 
about a million rows, even queries 
against the index would slow the server 
down." 

Selling Source then set about select- 
ing a replacement database, and nar- 
rowed the field to three: IBM's DB2, 
InterSystems' Cache and Oracle's 8i. 
"We loved the idea that Cache was 
object-oriented, [but] the change in 
development model was so drastic that 
our [SQL] developers couldn't quite 
grasp it," he said of their evaluation of 
InterSystems. 

As for Oracle, "it took five or six 
phone calls to Oracle before someone 
would return our call," their technical 
questions went unanswered for weeks, 
and Oracle's six-figure price tag was well 
over their $60,000 budget. 

IBM was selected, once again with 
price as a major factor. "The support 
during the presales experience was 
phenomenal, and they came in at 
around $20,000 — well under budget," 
Strange said. 

But Selling Source's DB2 migration 
may not have been necessary. Corey 
Ostman, CTO at PriceGrabber.com 
LLC, said his online comparison shop- 
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ping site maintains a MySQL database 
with hundreds of tables spread across 
many servers. He puts the total number 
of rows at around 200 million. "We have 
not seen any performance degradation 
within tables greater than a million 
rows," Ostman said. 

PriceGrabber has been using 
MySQL since the company began in 
1999; it now boasts about 12 million 
users. "We often do queries against 
tables with 10 million rows that are part 
of a three- or four-table join with excel- 
lent performance," he claimed. 

Ostman said that queries are fine- 
tuned using the EXPLAIN command, 
which returns a table showing which 
search strategy MySQL's optimizer used 
for a particular SQL statement. 



PERCEPTION IS REALITY 

What one developer perceives as a slow 
database, another may be certain is not. 
IBM also has suffered, Jones said, from 
the perception that it offers just main- 
frame database software. "That hasn't 
been true since 1993, when we first gave 
birth to DB2 on Unix." Unix edition 
pricing starts at US $999 per server plus 
$249 per user. 

GeoNorth's Payne said that when 
offered a choice among the big three, 
customers often favor Microsoft. "There's 
a perception we deal with that Oracle and 
[IBM] 'nickel and dime' you with mod- 
ules and other things that have to get 
added unexpectedly to finish the job." 

Another barrier to adoption, Payne 
said, is the perceived cost of the data- 
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functionality for their database prod- 
ucts. 

IBM also offers development-tool 
plug-ins for DB2 that enable develop- 
ers to use its WebSphere Studio, 
Microsoft's Visual Studio and Visual 
Basic, Borland's Kylix, C#Builder and 
C ++Builder as well as Eclipse. 

Marshall Payne, co-founder of data- 
base consultancy GeoNorth LLC, 
which specializes in geographic infor- 
mation systems (GIS) and other spatial 
systems, said that while the big three 
kept up with advances in data types, 
others have not. "We used to do a lot of 
business with Sybase," he said. "But 
when we started getting heavy into 
GIS, Oracle, IBM and Microsoft kept 
up with the trend to store spatial and 
geometric information in the database, 
and away from a file system." 

But Sybase Corp. did not, Payne 
said, and "Sybase took a nosedive in 
terms of market share." 

Tom Traubitz, senior group product 
marketing manager of Sybase's enter- 



prise data management products, said 
that for its part, Sybase addresses most 
specialty data needs through exten- 
sions for its Adaptive Server Enter- 
prise database engine built by third- 
party developers. "We've been 
offering a geospacial extension for 
ASE through Boeing Autometric since 
about 1994, and we use Verity for 
enhanced full-text search." XML is 
native to ASE, he added. The compa- 
ny offers no audio or video storage 
capability, he said. 

Though Traubitz conceded that 
Sybase has lost market share in recent 
years, he attributed the loss to growth 
of packaged database applications 
versus custom applications. "Sybase 
tends to specialize in high-perfor- 
mance custom applications, so our 
market segment has not grown as fast 
as others, and that's reflected in 
the market share. But Sybase has 
been profitable for the past 25 consec- 
utive quarters. And that's the really 
important thing." I 
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base administrator. "A trained Oracle 
DBA usually commands a higher salary" 
than his SQL Server counterpart, he 
said. There's also an expectation within 
companies that they may not be able to 
attract a high-end Oracle DBA because 
of the reduction in pay that person will 
be forced to accept, he added. 

Claiming less administration than 
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competitors among its differentiators is 
Sybase Inc. with its Adaptive Server 
Enterprise, which starts at US$1,495 for 
five users. Sybase says ASE's main bene- 
fit is its ability to process queries on 
highly dynamic data. "Sybase ASE has a 
single multithreaded kernel that enables 
us to handle problems where there's a 
► continued on page 30 
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very great change rate in the 
data," said Tom Traubitz, senior 
group product marketing man- 
ager of Sybase's enterprise data 
management products. 



"Many of our customers 
can't look at an image that's 10 
minutes old, because in many 
cases, that's too old," Traubitz 
continued, citing securities 
trading and military intelli- 



gence applications as exam- 
ples. "These are applications 
where you have to look at the 
data as it's changing and make 
decisions on that changed data 
right then and there." 



Mike Paola, senior group 
product manager for Sybase's 
SQL Anywhere line of applica- 
tion-specific and mobile data- 
base development tools, said that 
companies with investments in a 
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mixture of database products can 
benefit from iAnywhere's Syn- 
chronization Server. "Let's say 
you want to use your SQL data- 
base on laptops. We can synchro- 
nize directly with back-end data- 
bases from Microsoft, Oracle 
and IBM." Mobile solutions 
from those companies, he said, 
"are typically vendor-specific 
unless you put in a second-tier 
staging database." 

NO TIME FOR FEATURE BLOAT 

Whether real or imagined, 
another perception is that ven- 
dors increase features to justify 
maintenance contracts. "Oracle 
can provide a five-page list of 
features we don't have and say 
that's why you should buy Ora- 
cle," said MySQL's Urlocker, 
citing Oracle's grid capabilities 
for emphasis. "But we look at 
that and say that's why you 
should buy MySQL, because 
you often don't need those fea- 
tures, and who in IT has time to 
look at them all?" 

Urlocker asserted that soft- 
ware vendors across the indus- 
try add new features to justify 
their maintenance charges. 
"Sometimes those features are 
good, but there's a cost to that 
feature bloat in terms of com- 
plexity and expertise required to 
manage it. Developers are just 
trying to get their applications 
up and running with a mini- 
mum of fuss and complexity." 

Defending its regimented 
update cycle is PointBase Inc., 
which revs its all-Java SQL data- 
bases every four months. "That 
allows us to incrementally 
improve the product on a regular 
basis," said Alec Beaton, techni- 
cal support manager at Point- 
Base, a division of DataMirror 
Mobile Solutions Inc. "Also, if 
you need a new feature or have a 
serious problem that can only be 
fixed in a new release, you don't 
have to wait a year; it's four 
months at most." 

Again defending the open- 
source paradigm, Urlocker 
described MySQL's bug re- 
porting process. "When people 
report a defect, they often 
identify the line and the mod- 
ule so we can validate and cor- 
rect it immediately. If you send 
a bug to a large software com- 
pany, you sometimes never 
hear from them. It's nice to 
know that if you do find a bug, 
you have the freedom to fix it 
yourself." I 
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EDITORIAL 

Standards Matter 

Thanks to generally peaceful relations between genuine 
standards organizations, such as the World Wide Web 
Consortium, and such vendor consortia as OASIS, the Web 
Services Interoperability Forum and the Java Community 
Process, Web services are on the cusp of becoming broad- 
ly useful and trustworthy But they're not there yet. 

The original specifications at the heart of what's now 
called Web services— XML, SOAP, WSDL and UDDI— 
were little more than a beginning. While they offered the 
seeds of a way to seamlessly transfer data and invoke 
remote procedures between heterogeneous computing 
environments, they fell far short of being deployable 
beyond small, tightly controlled conditions. 

Those four cornerstone specs didn't provision security, 
wouldn't handle multistep transactions, didn't allow for 
active management and exception handling, and couldn't 
scale. But with them, the W3C paved the way for the 
future. 

Enter the vendors, and numerous vendor consortia. The 
profit motive is a strong one: Companies including BE A, 
IBM, Microsoft and Oracle saw the commercial potential 
in Web services, and through unilateral, bilateral, trilateral 
and other genuinely collaborative efforts, plus a new 
emphasis on compliance testing, have been extending Web 
services beyond academia to a truly commercial — and 
deployable — set of communications protocols. 

Many other interoperable communications protocols, 
of course, follow a similar path, where vendor consortia 
complete the work of noncommercial standards bodies, 
and thereby allow a nascent technology to become broad- 
ly useful and trusted by ISVs, IHVs and consumers. 

Take Wi-Fi. The IEEE approved a number of specifica- 
tions in the 802 (Ethernet) family to cover local-area wire- 
less within its 802.11 subgroup. The "b" specification devel- 
oped by that working group, which covered 11 megabit 
communications in the 2.4GHz radio band, offered tremen- 
dous promise but contained the potential for incompatible 
vendor implementations. 

That's where a vendor group founded in 1999, the Wire- 
less Ethernet Compatibility Alliance, came in and offered 
up a brand name, Wi-Fi, that indicated a specific interpre- 
tation of those standards, plus a rigorous test procedure that 
ensured that branded devices would work with one another 
in the field. (WECA was renamed the Wi-Fi Alliance in 
2002.) Thanks to these efforts, Wi-Fi has become ubiqui- 
tous. The lesson: The IEEE standard alone wasn't enough. 

The same will be true of Web services. Standards creat- 
ed by the W3C, and additional specs layered on top of them 
by OASIS, the JCP and ad hoc vendor working groups, 
won't be enough to ensure that Web services are broadly 
interoperable. Certainly, unilateral vendor extensions to the 
standards, such as those most commonly offered up by BE A 
and Microsoft, may provide those particular companies with 
short-term advantages, but will do little to inspire develop- 
er and IT confidence in the trustworthiness of Web services. 

We have the foundation, and a set of excellent exten- 
sions — most notably the WS- Security family. What we 
need are extended interoperability tests, and perhaps 
stronger branding to indicate specific compatibility levels, 
in order to bring Web services to the next level. Develop- 
ing those — rather than building yet another WS-xxx 
spec — should be the industry's highest priority. I 



Fighting the Last War 



Shifting our IT projects to 
offshore developers in 
India, China, Russia, etc., has 
become a hot topic of debate 
lately. The domestic informa- 
tion technology industry sees it 
as a prescription for job loss. 
Free marketers see it as an 
expression of the inevitable dif- 
ference in salary rates in other 
parts of the world. Business 
people see it as a way to reduce 
costs: Why not hire a program- 
mer for US$30,000 a year in 
India rather than $150,000 a 
year in Silicon Valley? 

In the midst of these 
debates is a discussion of what 
should be done about this. 
Should we restrict offshore out- 
sourcing? Should we require 
companies to announce their 
intentions in advance, similar to 
how German companies are 
required to announce plant clo- 
sures months and months 
ahead of time? Should we say, 
as Steve Ballmer of Microsoft 
said recently, that the solution is 
in supply and demand and that 
if we merely had a greater sup- 
ply of domestic programmers, 
the price would decline to 
something like parity with off- 
shore rates. 



David McComb 



All this discussion misses the 
point entirely. What offshore 
development can do effectively 
and productively are exactly the 
kinds of things that we shouldn't 
be doing at all. 

What Offshore Develop- 
ment Is Good At. Offshore 
development works best when 
there is a very clear 
spec and means of 
testing against the 
spec, and a consider- 
able amount of devel- 
opment effort to be 
expended in develop- 
ing the product. This 
scenario was the norm 
through most of the 
1980s and 1990s, and 
during that time many 
companies had success with off- 
shore outsourcing of develop- 
ment. Those who have not had 
success have ascribed it to cul- 
tural and communication prob- 
lems, a lack of commonality of 
goals, etc. But there have been 
enough successes that we can say 
that the offshore model works in 
those circumstances. 

Perhaps one of the clearest 
examples of where it works is 
where an application must be 
rewritten in a new language for 




technological constraints and 
no new functionality needs to 
be added. 

Where Offshore Devel- 
opment Doesn't Work. Con- 
versely, many companies have 
found that offshore develop- 
ment does not work when the 
requirements are not well 
known and are 
evolving as the pro- 
ject evolves. Soft- 
ware companies are 
finding what manu- 
facturing companies 
found in the 1980s 
and 1990s— that 
some products cer- 
tainly can be made 
more cheaply over- 
seas. However, there 
are many situations in which 
the time delay and the added 
barriers of communication 
from lack of proximity, to say 
nothing of different cultural 
and even language back- 
grounds, make engineering 
change difficult and may make 
introducing new versions of 
products more expensive as 
many versions of the product 
may be in transit or in produc- 
tion at the foreign site. 

The equivalent in the soft- 
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REDUNDANCY 

The answer to Larry O'Briens 
dilemma in "Disgrace Under 
Pressure" [May 1, page 37 or at 
www. sdtimes . com/cols/winwatch 
_101.htm] is redundancy. I've 
worked for years on mission- 
critical applications where 
redundancy is used to build 
fault-tolerant systems that will 
not go down with a single fail- 
ure. Actually, such systems are 
quite common in areas where 
failure is unacceptable, such as 
medical, defense or industrial 
automation systems. Granted, 
most businesses are not willing 
to pay for redundancy in the 
average desktop PC. 

My belief is that far too much 
software does not even try to 
deal with faults. Many programs 
are written to throw an excep- 
tion and shut down after any 
fault, including faults that 
should not be critical at all. Does 
a program need to crash if it is 
reading a file that has a single 
bad block in it? Perhaps the data 
that is needed is in a good block. 
Does a program necessarily 
need to crash if a DLL cannot 



be found? Possibly the functions 
in the DLL are not critical. 
Should a program fail if it tries 
to write a file and encounters a 
bad block? Why couldn't the 
operating system mark the block 
as bad and find another one to 
use? And of course the problem 
with "throwing exceptions" when 
an error, or worse a warning, is 
encountered is that far too many 
programmers do not attempt to 
catch the exceptions. In their 
defense, it's not always clear 
what procedure might throw an 
exception or what type of excep- 
tion might be thrown, and for 
this reason I've always preferred 
methodologies that return error 
codes instead of throwing excep- 
tions. Still, I've heard far too 
many times: "Don't worry that 
will never happen." 

It takes a lot of time to 
implement good fault handling, 
and many software companies 
and teams simply do not want 
to spend the time and money 
on it. Except in mission-critical 
or life-and-death applications, 
the market has not demanded 
it. One would have thought that 



scuba diving equipment would 
qualify as life and death. 
Mark Reineck 

President 

Nth Generation 

RIDDLE ME THIS 

If the wars were only between 
Microsoft and Sun, your editor- 
ial ["Microsoft Wins the Java 
Wars," May 1, page 32, or at 
www.sdtimes.com/opinions 
/opinion_101.htm] may be 
accurate. How many of the For- 
tune 1000 companies run the 
majority of their business on 
platforms of either company? 

Clue: Edward J. Correia's 
front page article. Another: 
Which company's gross rev- 
enues are roughly three times 
the combined revenues of both 
companies? 

Here's another question to 
test your industry acumen: 
Which is the world's most popu- 
lar programming language today 
for new software development? 

The clue to this is also in SD 
Times' May 1 issue. 

Bruce E. Hogman 

EDS Corp., CESC Miramar 
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ware world would be, in its most 
extreme case, agile develop- 
ment. In agile development, we 
recognize that the crafting of the 
solution is changing the percep- 
tion of what's needed as well as 
what's possible, which in turn 
changes not only the require- 
ments but also the product. It is 
much more difficult, although 
not impossible, to get an agile 
development team working 
across a half-dozen time zones. 

We Shouldn't Be Doing 
What We're Sending Over- 
seas. There are very few cases 
where custom development of 
entirely new applications and 
procedural code is justified. 
Certainly, we should not be 
undertaking the megascale pro- 
jects that we did in the 1990s. 
We have proven, I think, 
beyond a shadow of a doubt, 
that the larger the scale of the 
project, the more likely it is to 
fail, regardless of how much or 
how little you're paying per 
hour to the people who are 
attempting to complete it. 

But what if you have an old 
application that works perfectly 
fine and is written in a language 
that has become obsolete and 
must be replaced? Certainly, 
that would be a candidate for 
offshore development. Howev- 
er, there is plenty of technology 



available, called legacy under- 
standing or legacy re-engineer- 
ing technology, that will allow 
you to parse all the existing code 
and create a reference model 
that represents the design of the 
existing system. This reference 
model can then be expressed in 
a modern language. More inter- 
estingly, if there are design 
enhancements to be contem- 
plated, it's at this level that we 
can most productively make 
them. Sending the system off- 
shore will merely take longer 
and deliver a new set of legacy 
code in a modern language. 

Perhaps you have a legiti- 
mate need for a new custom 
application. It would be unusu- 
al to find a new application 
development project that was 
not a good candidate for model- 
driven development. In model- 
driven development, the 
designers and requirements- 
setters create very explicit and 
formal models of the resulting 
application. The application is 
then created mostly automati- 
cally from the design model. In 
some cases, code is generated 
from the design model; in other 
cases, the design model exe- 
cutes interactively as the pro- 
gram runs. In any event, there's 
very little need for additional 
programming. 



Perhaps you have a large 
number of systems that need to 
be integrated and the integra- 
tion itself is a large program- 
ming effort. In that case, you'd 
be wise to adopt a service- 
oriented architecture and/or 
some message-driven middle- 
ware, where you express the 
meaning of the interface of each 
application in what is called a 
canonical format that can be 
understood by all other applica- 
tions. The primary effort is in 
designing and defining these 
canonical formats, and a small 
but important part of the effort 
is in translating the individual 
applications to the canonical. 
Again, by far, most of the effort 
is in the requirements and 
design, and tools can greatly aid 
development of the adapters. 

IT'S POINTLESS 

The whole debate about off- 
shore development is largely 
pointless. The projects that are 
being argued about, as to 
whether they should go off- 
shore or not, should for the 
most part not be done at all, or 
be done so drastically different- 
ly that the economics of off- 
shore development would not 
play a significant role. 

The unfortunate implication 
of this assessment is that while 



it may make offshore develop- 
ment moot and may end the 
current debate without another 
shot being fired, it really does 
nothing to aid the plight of the 
underemployed domestic IT 
professional. The implication 
of this is clear: We will need far 
fewer application programmers 
than we've had at any time in 
the past 20 years. That's the 
bad news. 

The good news is that almost 
all of our existing applications 
need to be redeveloped and 
redeployed. They are woefully 
inadequate for our current 
needs. They are fabulously 
inflexible, and most can be 
replaced for their current main- 
tenance cost, which is prohibi- 
tive. When you contemplate 
the scale of systems that can be 
economically replaced, you'll 
realize that this could easily 
take up all the slack in the over- 
supply of developers provided 
they learn the new skills that 
are needed, which primarily 
include business analysis, 
requirements and what is called 
"programming in the large" — in 
other words, assembling new 
solutions from reusable compo- 
nents and existing services. I 

David McComb is president of 
Semantic Arts Inc. 



PASSING THE TEST 

Excellent story! We need more 
of this type of quality writing in 
SD Times ["Testing 101: AWOL 
on the College Campus," April 
15, page 1, or at www.sdtimes 
.com/news/100/story2.htm] . 
Would also appreciate a few 
how-to articles occasionally on 
some aspect of testing and soft- 
ware design. How about the 
high-level steps necessary to 
implement an effective test 
organization? Or the steps to 
get testing going in a local col- 
lege? Thanks much. 
George Hoffer 

CAREFUL WITH XML 

I think it's about time that 
someone is indicating that 
much of the "use" of XML is 
actually "abuse" ["The Other 
Side of XML," April 15, page 
35, or at www.sdtimes.com 
/cols/integrationwatch_100.htm]. 

XML is not appropriate for 
everything. 

Roy W Fileger 

RISKY BUSINESS 

So just say it: ALL AMERI- 
CANS are overpaid in compari- 
son to the rest of the world. 
["Are U.S. Developers at Risk?" 



April 15, page 30, or at www 
.sdtimes.com/news/100/special2 
.htm]. An important point to 
me is if you have never seen a 
factory or built some code, you 
are not as likely to continue to 
come up with innovations. All 
American workers cannot be 
"ignorant" (not stupid) upper- 
level managers. Upper-level 
managers who start in the 
trenches may not be the best 
business persons, but they add 
significant value to the corpora- 
tion that a pure business point 
of view cannot. 

Lissa Klein 

SBC 

CORRECTION 

The Velosity real-time operat- 
ing system from Green Hills 
Software Inc. operates in about 
3KB of RAM. A story in the 
May 1 issue incorrectly stated 
the RAM requirement. 



Letters to SD Times should include the 
writer's name, company affiliation and 
contact information. Letters become the 
property of BZ Media and may be edited. 
Send to feedback@bzmedia.com, or fax 
to +1-516-922-1822. Please mark all cor- 
respondence as Letters to the Editor. 



Do Developers 
Plan to Adopt 
.NET Alternatives? 



DATA WATCH 



Most developers have a "wait and see" attitude toward two forthcom- 
ing open-source alternatives to Microsoft's .NET runtime and develop- 
ment framework. Likely to be available first is Novell's Mono (www 
.go-mono.com), a ".NET for Linux" set for a midyear release. Also in the 
works but with no set release date is Portable.NET (www.southern-storm 
xom.au), a portion of the Free Software Foundation's DotGNU project 
analogous to Mono that also will run on Mac OS X, Unix and Windows. 
This portion of the code is being maintained by Southern Storm Pty 
Ltd., its original developer. 

But are developers willing to adopt these technologies once 
released? According to Evans Data Corp.'s Spring 2004 Linux Develop- 
ment Survey, published in March, 55 percent are undecided, while 
about 12 percent said they would not adopt them. 

It is interesting to note, 



according to Evans, that 
in prior surveys, where 
respondents were given 
only yes or no choices to 
the same guestion, about 
55 percent indicated they 
would adopt Mono or Dot- 
GNU. Affirmative respons- 
es dropped to about 32 
percent when an "undecid- 
ed" option was added to 
the survey. 



Undecided 
55.9% 
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Spam Threatens the Way We Work 



Plenty of ink has been spent on what 
we could or should do about spam. 
Most of it has been wasted based on the 
amount of unwanted e-mail in my inbox. 
The U.S. government's effort to CAN- 
SPAM so far has resulted in arrest war- 
rants for four spammers — one of which 
is in custody. Meanwhile, spam volume 
has increased by 40 percent. 

What disturbs me more, though, is 
the increasingly limited use that e-mail 
now has because spammers have ruined 
the medium. For example, you can no 
longer blithely assume your message was 
received simply because you sent it. 
(Actually, you never could make this 
assumption, but at one time you could 
be pretty close to sure.) 

Multiple obstacles diminish the cer- 
tainty of safe arrival. The first, of course, 
are spam filters. Depending on whom 
you're writing to, all sorts of words 
deemed offensive can force your message 
to be rerouted to "possible spam" folders 
where you hope it will distinguish itself 
from several thousand messages hawking 
impotence cures and weight loss 
schemes. If you're on a spam "white" list 
(a sender known to be safe), you're fine. 

But what do you do if you're e-mailing 
your long-lost buddy or ex-girlfriend 
whom you haven't communicated with in 
years? Alex Neihaus, who runs marketing 



at Accurev, a tools vendor, points out per- 
spicaciously that this specific problem will 
force people to come out from behind the 
keyboard and call people via telephone, 
like we all used to do in the old days. This 
warm, repersonalized world, however, is 
really just a way of recognizing the sub- 
stantial breakdown of e-mail. 

Let's take it one step further. Is there 
any possible way that you could 
engage someone who does not 
have you on their white list on 
the topic of, say, which works 
better: Viagra or Levitra? 
While I realize not one of our 
SD Times' readers would need 
this information, surely a close 
friend might. And yet no 
e-mail containing either word 
or a disguised spelling could 
ever pass through spam guards. 

Finally, there is the problem of domain 
names. Those that contain the successive 
letters s-e-x are marked in many systems 
as spam. So if American Express had 
followed the lead of Diner's Club and 
called itself American's Express, its 
domain name — americansexpress.com — 
would preclude communication with its 
customers. If you registered online for 
Amex, you could never receive confirma- 
tion of your account. Auto-parts retailer, 
PartsExpress.com, recently suffered this 



Integration Watch 




rejection from spam filters, and it will 
soon change its name to the less desirable 
Parts-Express.com. 

Attachments are a different kind of 
complication made possible by virus writ- 
ers and spyware vendors who are spam- 
mers, too. Today, if you want to send a .zip 
file with an executable attachment, you 
will find your path blocked by all forms of 
silent software. The silent part 
is particularly vexatious. The 
filters, especially at large cor- 
porations, simply remove the 
message. They do not alert the 
sender that the message was 
refused, nor do they alert 
the intended receiver that the 
message was quashed. 

Quashing a message 
should be an extreme mea- 
sure. The addressee should, 
by all rights, have the option of accepting 
the message, attachments and all. But 
this courtesy, as well as the once-common 
alerts of nondelivery, are a nearly extinct 
tradition. On a similar path to disappear- 
ance are the request for notice of delivery 
and, slightly less rare, notice that the 
reader has opened the e-mail. 

So, if you must send attachments, you 
have essentially two choices: Keep pes- 
tering your addressee to see if any of 
your multiple resends have made it 



through, or post the files on a private 
FTP site and have the addressee down- 
load them. As ever, there are ways to cir- 
cumvent the problem, but each end-run 
affirms with plangent voice that e-mail is 
no longer a viable way for people or even 
machines to communicate with us. 

I do not think legislative proposals 
will work, because the cost of prosecu- 
tion of so many low-level criminals is far 
too great to make it worthwhile. In fact, 
according to MessageLabs, a company 
that sells anti-spam software, spam vol- 
ume has grown by 30 percent since the 
CAN-SPAM act went into effect in 
the United States. A better solution, I 
believe, is to make spam unattractive by 
charging a small amount — a penny a 
message — for all messages beyond the 
first 30 e-mails in a day. Customer- 
oriented firms with large opt-in mail- 
bases could use RSS or get a lower rate 
that is still high enough to prevent spam- 
mers from firing up the box. 

Other solutions have been put forth, 
but many require creating a different 
Internet (unlikely soon) or new laws (too 
expensive to enforce). Whatever the 
means, businesses and ISPs must soon 
come together and decide on an effective 
solution that they will implement with all 
due haste. Otherwise, we risk the loss of 
this most important medium. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works LLC. 
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— 1 Go Anywhere You Want 
with Java™ Technology 

It all starts at the JavaOne " conference. 

Java" technology is everywhere, improving ttie digital experience for everyonE. 
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Microsoft Doesn't Hold All the Cards 



Perhaps you've seen the show "World 
Poker Tour," which every week 
shows the final table of a high-stakes 
poker tournament. It's a great show that 
cleverly stokes the illusion that the view- 
er could outplay the best poker players 
in the world. It does this by showing the 
home viewer the hidden cards of all the 
players, which makes second-guessing 
the play just a tad easier. 

After a few weeks of viewing, a pat- 
tern becomes clear. The final table usu- 
ally has a predictable composition: 
There are a few elite tournament players 
who get to the final tables time and time 
again, several representatives of a larger 
cadre of professionals who probably end 
up in the money but not at the final table 
of most tournaments they enter, and just 
about every week there's a seat or two 
held by "amateurs," who are good poker 
players, but for whom luck almost cer- 
tainly played a major role in getting to 
the table. 

Now, I'm not saying that the ama- 
teurs are just lucky. For all the "two min- 
utes to learn" premise of the show, it 
isn't trivial to calculate evolving odds on 
pots valued at hundreds of thousands of 
dollars without the slightest "tell" of 
body language. And week after week, it 



is shown that a talented amateur with 
good cards can beat the most fearsome 
professional with bad cards. 

Which brings us to Microsoft. 

Microsoft is like one of the tourna- 
ment pros who appear at the final poker 
table time and again — Phil Hellmuth, 
for example, a notorious trash-talking 
egotist whose behavior at the table is cal- 
culated to intimidate and irri- 
tate people into poor play 
(www.philhellmuth.com). Yes, 
if you're considering "entering 
the tournament," you should 
have an idea of how to play 
when this fearsome competi- 
tor has you in the sights. If it 
comes down to you and this 
competitor, you'll need lots of 
luck to come out on top. If, on 
the other hand, your goal is 
simply to end up "in the money," you're 
nuts to let fear keep you out of the game. 
Absolutely nuts. 

Microsoft has revealed its cards. 
Microsoft is going to "play" Whidbey 
(Visual Studio 2005), Yukon (SQL Serv- 
er 2005), Longhorn (still just Longhorn, 
for now) and Office. If you make, say, a 
3D modeling tool, you will face fierce 
competition for the pot, but it won't be 
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from Redmond. Microsoft has a lot of 
chips, and it's true that it could apply 
those chips to funding a skunkworks 
project that will fundamentally redefine 
application development, or data stor- 
age, or word processing or what-have- 
you. Maybe there's even a hint of some- 
thing along those lines on the Microsoft 
Research Web site. Rut you can bet your 
last dime that Microsoft is 
not going to do anything to 
undermine its core products. 
This gives the entrepre- 
neurial software developer 
or company a tremendous 
advantage, the likes of which 
haven't been available for a 
decade or more. New Office 
suite products like InfoPath 
and OneNote were un- 
knowns before they came 
out, and it would have been unnerving 
to be developing software for standard- 
izing forms or note-taking (although the 
first versions of both products followed 
Microsoft's standard practice of having 
solid but not spectacular features in a 
highly polished user interface). Today, 
though, the field is clear across the 
board. Even in areas where Microsoft is 
definitely "in the game," such as with the 
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Tablet PC, entrepreneurs can know that 
they have two years or more in which to 
enter the marketplace and establish 
their products. 

Of course, this is not to say that 
Microsoft won't act like a poker pro. It 
will hint that it might Assimilate You, it 
will hint that it might Crush You Like a 
Rug. It will move its chips toward you 
and see if you sweat or smile. And you 
know what it will do if you don't blink? It 
will offer to buy you out of the tourna- 
ment. They never show such things on 
the "World Poker Tour," but it's a part of 
many real tournaments: Players evaluate 
their expected value and agree to split 
the prize money without subjecting 
themselves to the vagaries of chance. 

Fantasize all you want about spurn- 
ing that offer and going all-in against 
Redmond. You know Microsoft's cards. 
You know its temperament. The chal- 
lenge is that as a programmer you don't 
get dealt cards, you build them, and 
there's never enough time to build pock- 
et aces. Still, if you have the talent, the 
resources and, yes, the luck, the chance 
to end up in the money is the best it's 
been in a long time. Ante up. I 

Larry O'Brien is an independent tech- 
nology consultant and analyst, and the 
founding editor of Software Develop- 
ment Magazine. 



When Hiring, Smarts Beat Skill Lists 



During dinner after the last day of a 
five-day training session on object- 
oriented design, the manager who'd 
hired me posed an interesting question: 
How do you identify above-average Java 
programmers in a job interview? 

To my mind, that's the most impor- 
tant question that any competent man- 
ager can ask. The days of the manager 
doing the work while the peons do his 
bidding are long past. The best work is 
done by a team of great programmers, 
with their managers making it possible 
for them to do nothing but program. 
Finding an exceptional Java program- 
mer — someone who can work 10 times 
more effectively than an average pro- 
grammer — is not easy, but it's essential. 

Nonetheless, it's amazing to me how 
bad a job most companies do when they 
hire. I occasionally log in to the big job 
boards just to see what skills are hot at 
the moment, and I'm always shocked by 
the ads that I see. First, the ads often 
consist of marketing hype that doesn't 
accurately describe the work to be done. 
Since competent programmers typically 
want to know what they're getting into, 
that fact alone probably weeds out scads 
of qualified candidates. 

Next come the laundry lists: com- 
pendiums of random, often mutually 
exclusive skills. I just saw an ad requiring 
Linux, Unix and Windows system 
administration, in-depth knowledge of 
Oracle, SQL Server and Sybase, mastery 



of C++, Java and Visual Rasic, and an in- 
depth understanding of WebSphere, 
Apache/Tomcat and Web Logic. 

This ad tells me a lot about the com- 
pany: They don't know what they're 
building or how they're going to build it. 

It is sometimes the case that you have 
to hire before you have a well-defined 
architecture, but in that case you need to 
be looking for smart people who can do 
quality design work, not a bunch of dilet- 
tantes who know a little of 
everything but can't do any- 
thing well. Some clown in HR 
will probably take this laundry 
list literally and weed out 
everyone who doesn't have the 
entire list on their resume, 
eliminating lots of excellent 
programmers who aren't will- 
ing to lie to get a job. 

It doesn't matter if a candi- 
date has written a kazillion 
EJRs, if they were all garbage. I'd much 
rather hire a smart programmer who 
knows both the core language and object- 
oriented design principles inside and out, 
but who has never written an EJR, than a 
marginal programmer who has written 
200 of the things badly. More important, 
I want someone smart enough to recog- 
nize that I shouldn't be using EJRs at all 
if they're not appropriate, someone who 
can quickly pick up the technology neces- 
sary to implement an evolving system. 

The laundry- list approach (especially 




when coupled with automated keyword 
scanning of a resume) just doesn't work. 
So what does? 

First, if you're not an excellent pro- 
grammer, you won't be able to recognize 
one. Hire a consultant, if necessary, to do 
the vetting. Good consultants are expen- 
sive, but this is no place to pinch pennies. 
Have a candidate bring in some code 
and any related design documents. Cut 
the interview short if you can't under- 
stand what the code does sim- 
ply by reading it: Are variable 
and method names well cho- 
sen? Are comments present 
where they're needed (and 
absent where they're not)? Is 
the code well structured and 
formatted for readability? 
Look for a solid under- 
fjfjj f standing of the core language. 
jT^j Average Java programmers 
don't understand interfaces, 
inner classes or access privileges (they 
declare everything as protected). They 
don't understand when extends is 
appropriate and when it isn't. 

Threading — which is central to every 
real production application — is typically a 
mystery to a marginal programmer. At 
minimum, your candidates should under- 
stand deadlock and how it happens. They 
should understand the synchronize state- 
ment thoroughly and how it affects both 
static and nonstatic objects. 

Then comes the design can of worms. 



I personally believe that it's inappropri- 
ate to program a procedural system in an 
object-oriented language like Java. 
Object-oriented systems have, at their 
core, an interesting paradox: They're 
both more complex than procedural sys- 
tems and easier to maintain. 

Procedural systems written in object- 
oriented languages tend to have all the 
complexity of an object-oriented system 
without any of the maintenance advan- 
tages. I wouldn't even consider a candi- 
date that didn't know how to design. 
They should know the Gang of Four 
design patterns cold, for example. 

Can the candidate understand UML 
diagrams? Can they produce an Activity 
diagram from a couple of scenarios? Do 
they even know what a Use Case is? Do 
they understand dynamic modeling and 
the associated diagrams? Look at their 
code again. Someone who, by rote, makes 
the data fields of a class private, but pro- 
vides a getter and setter method for 
every data field, does not understand 
basic object-oriented principles like data 
abstraction and implementation hiding. Is 
the protected keyword used correctly 
(that is, primarily for template methods)? 

So that's a start. I don't have room, 
here, to cover more details, but I think 
you get the idea. Give up the laundry lists 
and start looking for real competence. 
The hiring decision is the most important 
one that a manager can make. I 

Allen Holub is a leading architect, consul- 
tant and instructor in C/C++, Java and 
OO design. Reach him at tDww.holub.com. 
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The list of companies tarred by the 
brush of financial wrongdoing grows 
ever longer. Enron... Adelphia Commu- 
nications . . . Tyco International . . . Com- 
puter Associates... Quovadx. . . 

Quovadx? Yes, proving that greed and 
the pressure of hitting analyst and share- 
holder expectations are not the exclusive 
domain of Wall Street giants, the relative- 
ly small software company based in 
Englewood, Colo., joins a club 
that it should not have wanted 
to be a member of, to para- 
phrase Marx (the comedian, 
not the socialist). 

The company has had to 
postpone its annual sharehold- 
ers meeting, which was set for 
June 3, and it was unable to 
file its 10-Q report of earnings 
for the period ending March 
31 due to the finding of irreg- 
ularities. For fiscal year 2003, the compa 
ny had revenues of US$71.6 million and 
showed a net loss of $14.6 million, after 
losing a whopping $104.1 million in 2002 
on revenues of $63.7 million. 

Quovadx recently purchased Rogue 
Wave, which sells C/C++ components 
and Web services libraries. Its original 
business, now called the Enterprise 
Application division, sells applications and 
services into the health-care, financial ser- 
vices and telecommunications markets. 

The CEOs of the larger companies 
have become household names as they 
have fallen from their lofty perches — 
Kenneth Lay, Dennis Kozlowski, Sanjay 
Kumar. At Quovadx, where the dollar 
amounts involved are too small to be 
sexy enough for the general media, the 
name of the CEO under whose watch 
Quovadx reported revenue it never 
received will not be widely known. 
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Quovadx also stands apart from the 
others through the forthrightness of act- 
ing president and CEO Harvey A. Wag- 
ner, who took over the reins after the 
investigations began and issued a press 
release on May 13 that offered great 
insight into how these things go wrong. 
While CA candidly acknowledged it 
had some accounting issues — after the 
mainstream press got wind of the story — 
the company offered no 
details into what it was looking 
for in its own internal investi- 
gations. These details came 
out only after charges against 
several of the company's top 
officers were filed. Quovadx, 
on the other hand, appears to 
want to do the right thing. (Of 
course, the threat of sanctions 
and possible prosecution 
always makes companies want 
to do the right thing long after they've 
been doing the wrong things.) 

In any case, the problems at Quovadx 
stem from a relationship it entered into 
with something called the Infotech Net- 
work Group, an outsourcing agent for 
companies based in India. According to 
the statements released by the company, it 
appears Quovadx agreed to pay about $2.5 
million to Infotech under an outsourcing 
deal that Quovadx admits was merely an 
inducement to get Infotech to agree to 
purchase $14.1 million worth of software 
from Quovadx for resale to its clients. 

Had the company done its due dili- 
gence, it would have known that much of 
the documentation Infotech presented 
was suspect at best. For starters, 
Infotech is not, nor has it ever been, a 
software distributor. Second, letters of 
credit it claimed to have with a bank in 
India have been shown to be nonexis- 



tent. Finally, letters Infotech provided 
to Quovadx — memoranda from state 
governments in India indicating they 
would buy software from Infotech — 
were not true commitments, and there 
are no assurances. Meanwhile Quovadx 
has never received payment from 
Infotech, and now does not expect to. 

But Quovadx has paid Infotech 
almost $3 million under the terms of the 
outsourcing agreement. It now admits 
that some of those payments were made 
for the purpose of helping Infotech 
establish the letters of credit it would 
need to pay for the Quovadx software. 
And now the company says it is investi- 
gating other irregularities that don't have 
anything to do with the Infotech affair. 

Very messy business indeed. Unfor- 
tunately, this is merely another ugly 
episode. How many more of them are 
going on today that we just haven't heard 
about yet? Plenty, I'm certain. 

There are several roots to this prob- 
lem. People are looking to the market to 
recoup the losses they suffered when the 
bubble burst as recession-ravaged inter- 
est rates remain low. Upper management 
remains overly greedy, believing they are 
"masters of the universe" — impervious 
to the laws and ethics that govern finan- 
cial practices. It also stems from the fact 
that Wall Street's punishments for miss- 
ing estimates are unduly harsh. 

Last, it has to do with the Quovadxes of 
the world wanting to become bigger fish 
in their ponds, feeding growth through 
acquisition rather than innovation, need- 
ing to drive revenue and market share to 
keep investment dollars rolling in, to fund 
larger acquisitions and keep pace with 
growing expectations on Wall Street. 

This system has gotten very screwed 
up. Sadly, I'm sure the story of Quovadx 
isn't the last of this genre to be told. I 

David Rubinstein is editor of SD Times. 



Java application server vendor JBoss Inc. has received a US$10 million investment, 
including funds from Intel Capital, the venture arm of chip maker Intel Corp. Intel 
also has agreed to provide hardware and knowledge to help JBoss achieve Sun J2EE 
certification on Intel's Itanium and Xeon processors. Intel joins Borland Software 
Corp., lona Technologies PLC, SchlumbergerSema, Sonic Software Corp., Unisys 
Corp. and WebMethods Inc. in JBoss' J2EE Certification Founders Program. They are 
providing JBoss with the staff and financial support necessary to complete Sun's test 
certification kit . . . Enterprise management solutions provider BMC Software Inc. 
will pay approximately US$239 million to acquire Marimba Inc., a maker of change 
and configuration management software, in an all-cash deal. BMC president Bob 
Beauchamp said the acquisition will position the company at the fore of business ser- 
vice management solutions providers, covering service desk, change and asset man- 
agement and client and server management . . . Business process management tool 
vendor Intalio Inc. has closed a US$11 million round of financing, led by Cargill Ven- 
tures. The funds will be used to extend worldwide sales and marketing programs as 
well as engineering and professional services. Deepak Malik, Cargill Ventures' man- 
aging director, joins Intalio's board . . . ANT Ltd. has received US$6 million from in- 
vestors to expand its position in the home entertainment and consumer electronics 
market, including broadband, satellite and cable TV markets. Technology investor 
Richard Farleigh led the investment in the Cambridge, England-based company. ANT 
had success this year when its Fresco Lite browser was integrated in the set-top box- 
es of Germany's largest cable TV company . . . Mercury Interactive Corp. has cre- 
ated a new brand and advertising campaign, redesigned its Web site (www 



.mercury.com) and opened new headquarters. The new 250,000-square-foot Mer- 
cury Campus in Mountain View, Calif., which replaces the Sunnyvale office, will host 
research and development, customer support and professional services, among oth- 
er activities. The campus will house more than 800 of its 2,300 employees 
. . . Nokia Venture Partners has led a US$10 million round of funding for Nevis Net- 
works Inc., a start-up creating enterprise security software. Earlier, Nevis raised a 
$10 million series A in April 2003 from New Path Ventures, a firm founded and man- 
aged by chip industry pioneers Vinod Dham and Tushar Dave. Nevis is headquartered 
in Santa Clara with an R&D center in Pune, India. 

EARNINGS: Mercury Interactive Corp. reported first-quarter 2004 revenue of 
US$156.8 million, an increase over the $110.4 million reported in the same quarter a 
year ago. Net GAAP income for the quarter was $18.9 million, or 19 cents per share, 
compared with $18.1 million, or 20 cents per share, for the first quarter of 2003 
... Web services infrastructure company WebMethods Inc. reported a third con- 
secutive quarter of revenue growth with earnings of US$55.8 million for the fiscal 
fourth quarter of 2004 ended March 31 and a GAAP net loss of $5.6 million. Those 
numbers compare with earnings of $49.1 million and net income of $157,000 for the 
same period last year. For the fiscal year ended, total revenue was $194.5 million, 
down slightly from $196.8 million in fiscal year 2003. On a GAAP basis, WebMethods 
posted a net loss for the year of $27.9 million, compared with a loss of $8.6 million 
a year earlier. The company anticipates earnings in the range of $51 million to $56 
million for the quarter ending June 30. 1 



CALENDAR OF EVENT* 



Enterprise Architect June 6-8 
Summit 

Rancho Mirage, Calif. 

FAWCETTE TECHNICAL PUBLICATIONS INC. 

www.ftponline.com/conferences/eas 

•NET Advisor Live June 6-10 

Las Vegas 

ADVISOR MEDIA INC. 
advisorevents.com/CMN0406p.nsf 

USENIX Annual June 27-July 2 

Technical Conference 

Boston 

ADVANCED COMPUTING SYSTEMS 

ASSOCIATION 

www.usenix.org/events/usenix04 

JavaOne June 28-July 1 

San Francisco 

SUN MICROSYSTEMS INC. 

java.sun.com/javaone 

Worldwide June 28-July 2 

Developers Conference 

San Francisco 

APPLE COMPUTER INC. 

developer.apple.com/wwdc 



Macworld 
Conference & Expo 

Boston 

IDG WORLD EXPO CORP. 

www.macworldexpo.com 



July 12-15 



Rational User July 18-22 

Conference 

Grapevine, Texas 
IBM CORP. 

www306.ibm.com/software/rational 
/events/ruc2004 



Black Hat USA 2004 

Las Vegas 
BLACK HAT INC. 
www.blackhat.com 



July 24-29 



VSLive New York July 26-29 

New York 

FAWCETTE TECHNICAL PUBLICATIONS INC. 

www.ftponline.com/conferences 

/vslive/2004/ny 



Open Source 
Convention 

Portland, Ore. 

O'REILLY MEDIA INC. 

conferences.oreillynet.com/os2004 



July 26-30 



SCO Forum 

Las Vegas 

THE SCO GROUP INC. 

www.sco.com/2004forum 



Aug. 1-3 



LinuxWorld 
Conference & Expo 

San Francisco 

IDG WORLD EXPO CORP. 

www.linuxworldexpo.com 



Aug. 2-5 



Embedded Software Aug. 17-19 
Development Conference 

San Jose 

BZ MEDIA LLC 

www.esdevcon.com 

For a more complete calendar of U.S. software devel- 
opment events, see www.bzmedia.com/calendar. 

Information is subject to change. Send news about 
upcoming events to events@bzmedia.com. 
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